A security audit identifies a number of large email messages being sent by a specific user from their company
email account to another address external to the company. These messages were sent prior to a company data
breach, which prompted the security audit. The user was one of a few people who had access to the leaked
data. Review of the suspect’s emails show they consist mostly of pictures of the user at various locations during
a recent vacation. No suspicious activities from other users who have access to the data were discovered.
Which of the following is occurring?
The user is encrypting the data in the outgoing messages.
The user is using steganography.
The user is spamming to obfuscate the activity.
The user is using hashing to embed data in the emails.
Steganography is the process of hiding one message in another. Steganography may also be referred to as
electronic watermarking. It is also the process of hiding a message in a medium such as a digital image, audio
file, or other file. In theory, doing this prevents analysts from detecting the real message. You could encode
your message in another file or message and use that file to hide your message.