{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,21]],"date-time":"2026-05-21T05:57:09Z","timestamp":1779343029636,"version":"3.51.4"},"publisher-location":"New York, NY, USA","reference-count":56,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,6,24]],"date-time":"2024-06-24T00:00:00Z","timestamp":1719187200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,6,24]]},"DOI":"10.1145\/3658664.3659637","type":"proceedings-article","created":{"date-parts":[[2024,6,12]],"date-time":"2024-06-12T15:09:27Z","timestamp":1718204967000},"page":"113-124","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":9,"title":["Text Steganography Methods and their Influence in Malware: A Comprehensive Overview and Evaluation"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0000-6469-9947","authenticated-orcid":false,"given":"Mandy","family":"Kn\u00f6chel","sequence":"first","affiliation":[{"name":"Institute for Computer Science, Martin Luther University Halle-Wittenberg, Halle (Saale), Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-7698-7554","authenticated-orcid":false,"given":"Sebastian","family":"Karius","sequence":"additional","affiliation":[{"name":"Institute for Computer Science, Martin Luther University Halle-Wittenberg, Halle (Saale), Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2024,6,24]]},"reference":[{"key":"e_1_3_2_1_1_1","first-page":"3","article-title":"Abuse of Cloud-Based and Public Legitimate Services as Command-and-Control (C &C ) Infrastructure : A Systematic Literature Review","volume":"3","author":"Turki Al","year":"2023","unstructured":"Turki Al lelah, George Theodorakopoulos, Philipp Reinecke, Amir Javed, and Eirini Anthi. 2023. Abuse of Cloud-Based and Public Legitimate Services as Command-and-Control (C &C ) Infrastructure : A Systematic Literature Review. Journal of Cybersecurity and Privacy , Vol. 3, 3 (Sept. 2023), 558--590.","journal-title":"Journal of Cybersecurity and Privacy"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.3390\/app12168176"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.3390\/jsan11030054"},{"key":"e_1_3_2_1_4_1","volume-title":"Revealed: Operation Shady RAT. Technical Report. McAfee. https:\/\/icscsi.org\/library\/Documents\/Cyber_Events\/McAfee%20-%20Operation%20Shady%20RAT.pdf","author":"Alperovitch Dmitri","year":"2011","unstructured":"Dmitri Alperovitch. 2011. Revealed: Operation Shady RAT. Technical Report. McAfee. https:\/\/icscsi.org\/library\/Documents\/Cyber_Events\/McAfee%20-%20Operation%20Shady%20RAT.pdf"},{"key":"e_1_3_2_1_5_1","volume-title":"International Conference on Advanced Computer Science Applications and Technologies (ACSAT '12)","author":"Jabbar Altaay Alaa A.","year":"2012","unstructured":"Alaa A. Jabbar Altaay, Shahrin Bin Sahib, and Mazdak Zamani. 2012. An Introduction to Image Steganography Techniques. In International Conference on Advanced Computer Science Applications and Technologies (ACSAT '12). 122--126."},{"key":"e_1_3_2_1_6_1","article-title":"Use of Cryptography in Malware Obfuscation","volume":"20","author":"Asghar Hassan Jameel","year":"2024","unstructured":"Hassan Jameel Asghar, Benjamin Zi Hao Zhao, Muhammad Ikram, Giang Nguyen, Dali Kaafar, Sean Lamont, and Daniel Coscia. 2024. Use of Cryptography in Malware Obfuscation. Journal of Computer Virology and Hacking Techniques , Vol. 20 (March 2024), 135--152.","journal-title":"Journal of Computer Virology and Hacking Techniques"},{"key":"e_1_3_2_1_7_1","first-page":"5","article-title":"A Comparitive Study on the Advancement of Text Steganography Techniques in Digital Media","volume":"13","author":"Baawi Salwa Shakir","year":"2018","unstructured":"Salwa Shakir Baawi, Mohd Rosmadi Mokhtar, and Rossilawati Sulaiman. 2018. A Comparitive Study on the Advancement of Text Steganography Techniques in Digital Media. ARPN Journal of Engineering and Applied Sciences, Vol. 13, 5 (March 2018).","journal-title":"ARPN Journal of Engineering and Applied Sciences"},{"key":"e_1_3_2_1_8_1","volume-title":"Steganalysis: An Overview.","author":"Bartel Jim","year":"2002","unstructured":"Jim Bartel. 2002. Steganalysis: An Overview. (2002). https:\/\/www.giac.org\/paper\/gsec\/707\/steganalysis-overview\/101589"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1147\/sj.353.0313"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2019.2917199"},{"key":"e_1_3_2_1_11_1","unstructured":"Nick Biasini Edmund Brumaghin and Nick Lister. 2020. Threat Spotlight : Astaroth - Maze of Obfuscation and Evasion Reveals Dark Stealer. https:\/\/blog.talosintelligence.com\/astaroth-analysis\/"},{"key":"e_1_3_2_1_12_1","volume-title":"SECURWARE 2023: The Seventeenth International Conference on Emerging Security Information, Systems and Technologies. 33--42","author":"Birnbaum Bernhard","year":"2023","unstructured":"Bernhard Birnbaum, Christian Kr\"atzer, and Jana Dittmann. 2023. Stego-Malware Attribution : Simple Signature and Content-based Features Derived and Validated from Classical Image Steganalysis on Five Exemplary Chosen Algorithms. In SECURWARE 2023: The Seventeenth International Conference on Emerging Security Information, Systems and Technologies. 33--42."},{"key":"e_1_3_2_1_13_1","unstructured":"Jean-Ian Boutin. 2017. Turla's Watering Hole Campaign: An Updated Firefox Extension Abusing Instagram. https:\/\/www.welivesecurity.com\/2017\/06\/06\/turlas-watering-hole-campaign-updated-firefox-extension-abusing-instagram\/"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1109\/MITP.2018.032501746"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3048319"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSEC.2022.3178205"},{"key":"e_1_3_2_1_17_1","volume-title":"Pham","author":"Chaganti Rajasekhar","year":"2021","unstructured":"Rajasekhar Chaganti, Vinayakumar Ravi, Mamoun Alazab, and Tuan D. Pham. 2021. Stegomalware: A Systematic Survey of Malware Hiding and Detection in Images, Machine Learning Models and Research Challenges. https:\/\/www.techrxiv.org\/doi\/full\/10.36227\/techrxiv.16755457.v1"},{"key":"e_1_3_2_1_18_1","unstructured":"Andrey Dolgushev Vasily Berdnikov and Ilya Pomerantsev. 2019. Platinum Is Back. https:\/\/securelist.com\/platinum-is-back\/91135\/"},{"key":"e_1_3_2_1_19_1","volume-title":"Casbaneiro: Dangerous Cooking with a Secret Ingredient. https:\/\/www.welivesecurity.com\/2019\/10\/03\/casbaneiro-trojan-dangerous-cooking\/","author":"Research ESET","year":"2019","unstructured":"ESET Research. 2019. Casbaneiro: Dangerous Cooking with a Secret Ingredient. https:\/\/www.welivesecurity.com\/2019\/10\/03\/casbaneiro-trojan-dangerous-cooking\/"},{"key":"e_1_3_2_1_20_1","unstructured":"F-Secure Labs. 2015. Janicab Hides Behind Undocumented LNK Functionality. https:\/\/archive.f-secure.com\/weblog\/archives\/00002803.html"},{"key":"e_1_3_2_1_21_1","unstructured":"Stephen Forrest. 2006. Deogol - HTML Steganography Tool. https:\/\/hord.ca\/projects\/deogol\/"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/3320269.3384745"},{"key":"e_1_3_2_1_23_1","unstructured":"Josh Grunzweig and Jen Miller-Osborn. 2017. SunOrcal Adds GitHub and Steganography to Its Repertoire Expands to Vietnam and Myanmar. https:\/\/unit42.paloaltonetworks.com\/unit42-sunorcal-adds-github-steganography-repertoire-expands-vietnam-myanmar\/"},{"key":"e_1_3_2_1_24_1","unstructured":"Vladislav Hrv cka. 2019. Stantinko Botnet Adds Cryptomining to Its Pool of Criminal Activities. https:\/\/www.welivesecurity.com\/2019\/11\/26\/stantinko-botnet-adds-cryptomining-criminal-activities\/"},{"key":"e_1_3_2_1_25_1","volume-title":"An Algorithm of Webpage Information Hiding Based on Attributes Permutation. In 2008 International Conference on Intelligent Information Hiding and Multimedia Signal Processing","author":"Huang Huajun","unstructured":"Huajun Huang, Shaohong Zhong, and Xingming Sun. 2008. An Algorithm of Webpage Information Hiding Based on Attributes Permutation. In 2008 International Conference on Intelligent Information Hiding and Multimedia Signal Processing. IEEE Computer Society, 257--260."},{"key":"e_1_3_2_1_26_1","unstructured":"Jscrambler. 2022. Steganography in a Magecart Attack. https:\/\/jscrambler.com\/blog\/steganography-in-magecart-attack"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1108\/IJIEOM-01-2023-0011"},{"key":"e_1_3_2_1_28_1","volume-title":"Peter James Vial, and Brendan Halloran","author":"Kadhim Inas Jawad","year":"2019","unstructured":"Inas Jawad Kadhim, Prashan Premaratne, Peter James Vial, and Brendan Halloran. 2019. Comprehensive Survey of Image Steganography: Techniques, Evaluations, and Trends in Future Research. Neurocomputing , Vol. 335 (March 2019), 299--326."},{"key":"e_1_3_2_1_29_1","unstructured":"Matthew Kwan. 2013. The SNOW Home Page. https:\/\/darkside.com.au\/snow\/"},{"key":"e_1_3_2_1_30_1","unstructured":"Tom Lancaster and Micah Yates. 2016. Confucius Says. ..Malware Families Get Further By Abusing Legitimate Websites. https:\/\/unit42.paloaltonetworks.com\/unit42-confucius-says-malware-families-get-further-by-abusing-legitimate-websites\/"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.3390\/math9212829"},{"key":"e_1_3_2_1_32_1","unstructured":"Matthieu Faou. 2019. Turla LightNeuron - One Email Away from Remote Code Execution. Technical Report. ESET Research. https:\/\/web-assets.esetstatic.com\/wls\/2019\/05\/ESET-LightNeuron.pdf"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2015.33"},{"key":"e_1_3_2_1_34_1","unstructured":"McAfee. 2016. TeslaCrypt Ransomware Arrives via Neutrino Exploit Kit. https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/teslacrypt-arrives-via-neutrino-exploit-kit\/"},{"key":"e_1_3_2_1_35_1","volume-title":"Computers and Electrical Engineering","volume":"101","author":"Monika A.","year":"2022","unstructured":"A. Monika and R. Eswari. 2022. Prevention of Hidden Information Security Attacks by Neutralizing Stego-Malware. Computers and Electrical Engineering , Vol. 101 (July 2022), 107990."},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1109\/5.771065"},{"key":"e_1_3_2_1_37_1","unstructured":"Proofpoint. 2016. Massive AdGholas Malvertising Campaigns Use Steganography and File Whitelisting to Hide in Plain Sight. https:\/\/www.proofpoint.com\/us\/threat-insight\/post\/massive-adgholas-malvertising-campaigns-use-steganography-and-file-whitelisting-to-hide-in-plain-sight"},{"key":"e_1_3_2_1_38_1","first-page":"4","article-title":"Text Steganography Based On Unicode of Characters","volume":"3","author":"Rahma Abdul Monem S.","year":"2013","unstructured":"Abdul Monem S. Rahma, Wesam S. Bhaya, and Dhamyaa A. AL-Nasrawi. 2013. Text Steganography Based On Unicode of Characters in Multilingual. Int. Journal of Engineering Research and Applications (IJERA), Vol. 3, 4 (July 2013), 1153--1165.","journal-title":"Journal of Engineering Research and Applications (IJERA)"},{"key":"e_1_3_2_1_39_1","first-page":"1","article-title":"Comprehensive Survey of Multimedia Steganalysis","volume":"14","author":"Shehab Doaa A.","year":"2022","unstructured":"Doaa A. Shehab and Mohmmed J. Alhaddad. 2022. Comprehensive Survey of Multimedia Steganalysis : Techniques, Evaluations, and Trends in Future Research. Symmetry, Vol. 14, 1 (Jan. 2022), 117.","journal-title":"Techniques, Evaluations, and Trends in Future Research. Symmetry"},{"key":"e_1_3_2_1_40_1","volume-title":"IEEE International Conference on Information Theory and Information Security. 1147--1150","author":"Shen Dongsheng","year":"2010","unstructured":"Dongsheng Shen and Hong Zhao. 2010. A Novel Scheme of Webpage Information Hiding Based on Attributes. In IEEE International Conference on Information Theory and Information Security. 1147--1150."},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2020.emnlp-main.22"},{"key":"e_1_3_2_1_42_1","volume-title":"Advances in Cryptology","author":"Simmons Gustavus J.","unstructured":"Gustavus J. Simmons. 1984. The Prisoners ' Problem and the Subliminal Channel. In Advances in Cryptology. Springer, 51--67."},{"key":"e_1_3_2_1_43_1","unstructured":"Denis Sinegubko. 2020. CSS-JS Steganography in Fake Flash Player Update Malware. https:\/\/blog.sucuri.net\/2020\/11\/css-js-steganography-in-fake-flash-player-update-malware.html"},{"key":"e_1_3_2_1_44_1","unstructured":"Denis Sinegubko. 2021. Whitespace Steganography Conceals Web Shell in PHP Malware. https:\/\/blog.sucuri.net\/2021\/02\/whitespace-steganography-conceals-web-shell-in-php-malware.html"},{"key":"e_1_3_2_1_45_1","unstructured":"Stephen Eckels Jay Smith and William Ballenthin. 2020. SUNBURST Additional Technical Details. https:\/\/www.mandiant.com\/resources\/blog\/sunburst-additional-technical-details"},{"key":"e_1_3_2_1_46_1","volume-title":"Stegomalware: Playing Hide and Seek with Malicious Components in Smartphone Apps. In Information Security and Cryptology (Lecture Notes in Computer Science )","author":"Suarez-Tangil Guillermo","year":"2015","unstructured":"Guillermo Suarez-Tangil, Juan E. Tapiador, and Pedro Peris-Lopez. 2015. Stegomalware: Playing Hide and Seek with Malicious Components in Smartphone Apps. In Information Security and Cryptology (Lecture Notes in Computer Science ). Springer, 496--515."},{"key":"e_1_3_2_1_47_1","unstructured":"Symantec. 2011. Trojan.Downbot. https:\/\/web.archive.org\/web\/20150919030154\/http:\/\/www.symantec.com\/security_response\/\/writeup.jsp?docid=2011-052413--1248--99&tabid=2"},{"key":"e_1_3_2_1_48_1","unstructured":"Graham T. 2021. Bunnylab\/pyUnicodeSteganography. https:\/\/github.com\/bunnylab\/pyUnicodeSteganography"},{"key":"e_1_3_2_1_49_1","first-page":"4","article-title":"Modern Text Hiding, Text Steganalysis, and Applications","volume":"21","author":"Ahvanooey Milad Taleby","year":"2019","unstructured":"Milad Taleby Ahvanooey, Qianmu Li, Jun Hou, Ahmed Raza Rajput, and Yini Chen. 2019. Modern Text Hiding, Text Steganalysis, and Applications : A Comparative Analysis. Entropy, Vol. 21, 4 (April 2019), 355.","journal-title":"A Comparative Analysis. Entropy"},{"key":"e_1_3_2_1_50_1","unstructured":"Unicode Consortium. 2014. UTR #36: Unicode Security Considerations. https:\/\/www.unicode.org\/reports\/tr36\/"},{"key":"e_1_3_2_1_51_1","unstructured":"Unicode Consortium. 2023. Confusables.Txt. https:\/\/www.unicode.org\/Public\/security\/15.1.0\/confusables.txt"},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1145\/3465481.3470069"},{"key":"e_1_3_2_1_53_1","first-page":"3","article-title":"Generative Linguistic Steganography","volume":"16","author":"Xiang Lingyun","year":"2022","unstructured":"Lingyun Xiang, Rong Wang, Zhongliang Yang, and Yuling Liu. 2022. Generative Linguistic Steganography : A Comprehensive Review. KSII Transactions on Internet and Information Systems (TIIS), Vol. 16, 3 (March 2022), 986--1005.","journal-title":"A Comprehensive Review. KSII Transactions on Internet and Information Systems (TIIS)"},{"key":"e_1_3_2_1_54_1","volume-title":"An Overview of Text Steganalysis. In The International Conference on Image, Vision and Intelligent Systems (ICIVIS 2021)","author":"Yang Yu","year":"2022","unstructured":"Yu Yang, Lei Zha, Ziwei Zhang, and Juan Wen. 2022. An Overview of Text Steganalysis. In The International Conference on Image, Vision and Intelligent Systems (ICIVIS 2021) (Lecture Notes in Electrical Engineering ). Springer, 933--943."},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2018.2871746"},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1109\/BWCCA.2010.85"}],"event":{"name":"IH&MMSEC '24: ACM Workshop on Information Hiding and Multimedia Security","location":"Baiona Spain","acronym":"IH&MMSEC '24","sponsor":["SIGMM ACM Special Interest Group on Multimedia"]},"container-title":["Proceedings of the 2024 ACM Workshop on Information Hiding and Multimedia Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658664.3659637","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3658664.3659637","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T23:42:57Z","timestamp":1755906177000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658664.3659637"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,6,24]]},"references-count":56,"alternative-id":["10.1145\/3658664.3659637","10.1145\/3658664"],"URL":"https:\/\/doi.org\/10.1145\/3658664.3659637","relation":{},"subject":[],"published":{"date-parts":[[2024,6,24]]},"assertion":[{"value":"2024-06-24","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}