WetStone Announces New Release of StegoHunt™ MP

Skaneateles, NY – September 7, 2022— WetStone Technologies, the world’s leading provider of commercial steganography detection software, today announced the availability of a new version of StegoHunt MP.

StegoHunt™ MP. Version 7.3 adds significant capabilities to StegoHunt, improving the efficiency and focus of Digital Forensics and Incident Response (DFIR) investigations.

StegoHunt MP effectively detects the presence of both data hiding programs and the files in which data may have been hidden (carrier files). It provides digital investigators, corporate auditors, incident response teams, and data loss prevention (DLP) experts with an easy-to-use suite of steganography forensic tools.

Features introduced in Version 7.3:

• New algorithms for text files include detection of:
  • Steganography payloads that rely on invisible UTF-8 characters, such as those embedded by StegSnow
  • Embedded Base64 data, embedded binary data, and embedded URLs
• Added new algorithms for detecting embedded PowerShell scripts in PNG images
  • Includes ability to view payload, if available, in the reports
• Added ability to scan files, captured memory images, and when scanning live systems, active processes for evidence of Steganography Programs, using WetStone-supplied YARA rules

Enhancements included in Version 7.3:

• Added or improved polyglot detections for many filetypes including:
  • TIFF, PDF, JPEG, BMP, GIF, PNG, AVI, WAV, MP3, ELF, 7Z, RAR, TAR, SWF, EXE, MP4, NES, WEBM, OGG, TXT
• Improved PDF report generation performance for larger cases
• Improved detection of payloads in BMP files

“The threat landscape continues to see an increasing presence of malware that uses steganography for obfuscation,” stated Carlton Jeffcoat, WetStone’s Senior Vice-President. “Among the many new features provided by StegoHunt MP Version 7.3, some of the most impactful are improved steganalysis of carrier files associated with stegomalware, such as broader coverage for polyglots, and the detection of files with embedded Base64 data. PowerShell scripts, and invisible UTF-8 characters.”

StegoHunt MP is licensed as an Electronic Software Download (ESD) for forensic workstations or on WetStone-supported USB flash drives (SH-Flash) for field investigations. Current StegoHunt MP and Stego-Flash users with active support agreements may upgrade to version 7.5 at no additional charge.

WetStone Technologies, Inc.: (www.wetstonetech.com) is a global provider of innovative cyber security solutions. Since 1997 WetStone has equipped their customers with the research, technologies, trainings, and services that are needed to defend against today’s cyber criminals. WetStone is a subsidiary of Allen Corporation of America (www.allencorp.com).

For more information, please contact:

WetStone Technologies, Inc. Phone : 1-844-4-WETSTN (1-844-493-8786) Phone: 571.340.3474 sales@wetstonetech.com