TrendLabs: Daserf Backdoor Now Using Steganography

Figure 1: File properties of one of the decoy documents that REDBALDKNIGHT sends to Japanese targets
REF: http://blog.trendmicro.com/trendlabs-security-intelligence/redbaldknight-bronze-butler-daserf-backdoor-now-using-steganography/