Security-X

Forum Security-X => News => Discussion démarrée par: igor51 le juin 01, 2023, 19:03:08

Titre: [kreb]Ask Fitis, the Bear: Real Crooks Sign Their Malware
Posté par: igor51 le juin 01, 2023, 19:03:08

Ask Fitis, the Bear: Real Crooks Sign Their Malware

Code-signing certificates are supposed to help authenticate the identity of software publishers, and provide cryptographic assurance that a signed piece of software has not been altered or tampered with. Both of these qualities make stolen or ill-gotten code-signing certificates attractive to cybercriminal groups, who prize their ability to add stealth and longevity to malicious software. This post is a deep dive on "Megatraffer," a veteran Russian hacker who has practically cornered the underground market for malware focused code-signing certificates since 2015.
Source: Ask Fitis, the Bear: Real Crooks Sign Their Malware (https://krebsonsecurity.com/2023/06/ask-fitis-the-bear-real-crooks-sign-their-malware/)