How to Hack Forum Accounts with Password-Stealing Pictures

The pictures we upload online are something we tend to think of as self-expression, but these very images can carry code to steal our passwords and data. Profile pictures, avatars, and image galleries are used all over the internet. While all images carry digital picture data — and many also carry metadata regarding camera or photo edits — it's far less expected that an image might actually be hiding malicious code. How Is Hiding Code in an Image Possible? Files are generally structured in a few different parts. Image files, for instance, generally begin with some declaration of the type of... more

from Null Byte « WonderHowTo full article here