Coreldraw-graphics-suite-2021-corporate-v23.5.0.506.dmg < 2026 >

But every time the user saved a file named confidential_[anything] , the software didn't just render the image. It steganographically encoded a compressed log of the last five minutes of keyboard input into the alpha channel of the exported PNG.

The worst part? The file had been downloaded 847 times in the last three years. Every single download came from an internal IP address belonging to the Legal department. CorelDRAW-Graphics-Suite-2021-Corporate-v23.5.0.506.dmg

The Last Clean Build

CorelDRAW-Graphics-Suite-2021-Corporate-v23.5.0.506.dmg But every time the user saved a file