Terror EK spotted using SSL certificates to beat security

itman · Nov 29, 2017

Cybercriminals using the Terror exploit kit have recently starting using SSL certificates to help sneak the EK and its malware passed cybersecurity staffers.

Malwarebytes Lead Malware Intelligence Analyst Jerome Segura said in a blog that the switch to using SSL is part of the Terror EK's constantly changing profile as it attempts to evade detection, however, he noted that Smoke Loader is still the dropper being used.

The switch over to using SSL started in late August when the Terror EK users made an attempt at using HTTPS by using free SSL certificates, although this could have been a test of some type as they sometimes did still use HTTP. Segura also pointed at there were some problems with the validity of these certificates.
Click to expand...

https://www.scmagazine.com/terror-ek-spotted-using-ssl-certificates-to-beat-security/article/710039/

FanJ · Nov 29, 2017

I can't help it: I had to read it three times. Because in my language EK is used in the context of sports:
EK = European Championship (translated)

Log in or Sign up

Terror EK spotted using SSL certificates to beat security

itman Registered Member

FanJ Updates Team

Log in or Sign up

Terror EK spotted using SSL certificates to beat security

itman Registered Member

FanJ Updates Team

Useful Searches