The Italian RAT Campaign: When Malicious JARs Wear the Mask of Innocent PNG Images

During a recent malware campaign targeting Italian companies, threat actors disguised stager components to evade security controls by masquerading a JAR file as a PNG image. This technique enabled the initialization of a remote access trojan (RAT) infection, allowing the malicious code to execute undetected and compromise affected systems.