Stolen Government Certificate Used to Sign Malware

LoneWolf · Nov 14, 2011

F-Secure researchers claim that malware spreading via malicious PDF files is signed with a valid certificate stolen from the Government of Malaysia, in just the latest evidence that scammers are using gaps in the security of digital certificates to help spread malicious code.

The malware,identified by F-Secure as a Trojan horse program dubbed Agent.DTIW, was detected in a signed Adobe PDF file by the company's virus researchers recently. The malicious PDF was signed using a valid digital certificate for mardi.gov.my, the Agricultural Research and Development Institute of the Government of Malaysia. According to F-Secure, the Government of Malaysia confirmed that the certificate was legitimate and had been stolen "quite some time ago."

Valid digital certificates can be used to authenticate malicious programs and bypass operating system warnings designed to appear when users attempt to run the application.
Click to expand...

http://threatpost.com/en_us/blogs/stolen-government-certificate-used-sign-malware-111411

CloneRanger · Nov 14, 2011

Another one

Hungry Man · Nov 14, 2011

Thankfully CA's are being told to shape up or get blacklisted.

Log in or Sign up

Stolen Government Certificate Used to Sign Malware

LoneWolf Registered Member

CloneRanger Registered Member

Hungry Man Registered Member

Log in or Sign up

Stolen Government Certificate Used to Sign Malware

LoneWolf Registered Member

CloneRanger Registered Member

Hungry Man Registered Member

Useful Searches