Security-X
Forum Security-X => News => Discussion démarrée par: igor51 le avril 08, 2012, 00:06:30
-
Mediyes - the dropper with a valid signature
<p> <b>Post was updated 19.03.2012 (see below)</b></p> <p> In the last few days a malicious program has been discovered with a valid signature. The malware is a 32- or 64-bit dropper that is detected by Kaspersky Lab as Trojan-Dropper.Win32.Mediyes or Trojan-Dropper.Win64.Mediyes respectively.</p><p><p>Numerous dropper files have been identified that were signed on various dates between December 2011 and 7 March 2012. In all those cases a certificate was used that was issued for the Swiss company Conpavi AG. The company is known to work with Swiss government agencies such as municipalities and cantons. </p><p><p class="c"><img title="" border="0" alt="" src="images/pictures/klblog/683.jpg "/><br/><span class="small"><strong>Information about the Trojan-Dropper.Win32.Mediyes digital signature</strong></span></p>
Source: Mediyes - the dropper with a valid signature (http://www.securelist.com/en/blog/682/Mediyes_the_dropper_with_a_valid_signature)