<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Threat actors are hiding malware in]]></title><description><![CDATA[<p>Threat actors are hiding malware in .wav files now. Not even clever about it. Just BASE64 in the audio data. Plays as noise. Extracts in seconds.</p><p><div class="card col-md-9 col-lg-6 position-relative link-preview p-0">



<a href="https://isc.sans.edu/diary/A+WAV+With+A+Payload/32910/" title="A .WAV With A Payload - SANS Internet Storm Center">
<img src="https://isc.sans.edu/diaryimages/images/20260419-100007.png" class="card-img-top not-responsive" style="max-height: 15rem;" alt="Link Preview Image" />
</a>



<div class="card-body">
<h5 class="card-title">
<a href="https://isc.sans.edu/diary/A+WAV+With+A+Payload/32910/">
A .WAV With A Payload - SANS Internet Storm Center
</a>
</h5>
<p class="card-text line-clamp-3">A .WAV With A Payload, Author: Didier Stevens</p>
</div>
<a href="https://isc.sans.edu/diary/A+WAV+With+A+Payload/32910/" class="card-footer text-body-secondary small d-flex gap-2 align-items-center lh-2">



<img src="https://isc.sans.edu/favicon-32x32.png" alt="favicon" class="not-responsive overflow-hiddden" style="max-width: 21px; max-height: 21px;" />









<p class="d-inline-block text-truncate mb-0">SANS Internet Storm Center <span class="text-secondary">(isc.sans.edu)</span></p>
</a>
</div></p>]]></description><link>https://board.circlewithadot.net/topic/2b5fdffb-c457-4fe3-8cd0-6e4b1ffb3dba/threat-actors-are-hiding-malware-in</link><generator>RSS for Node</generator><lastBuildDate>Fri, 01 May 2026 12:56:09 GMT</lastBuildDate><atom:link href="https://board.circlewithadot.net/topic/2b5fdffb-c457-4fe3-8cd0-6e4b1ffb3dba.rss" rel="self" type="application/rss+xml"/><pubDate>Wed, 22 Apr 2026 14:00:33 GMT</pubDate><ttl>60</ttl></channel></rss>