Mediyes - the dropper with a valid signature<p> <b>Post was updated 19.03.2012 (see below)</b></p> <p> In the last few days a malicious program has been discovered with a valid signature. The malware is a 32- or 64-bit dropper that is detected by Kaspersky Lab as Trojan-Dropper.Win32.Mediyes or Trojan-Dropper.Win64.Mediyes respectively.</p><p><p>Numerous dropper files have been identified that were signed on various dates between December 2011 and 7 March 2012. In all those cases a certificate was used that was issued for the Swiss company Conpavi AG. The company is known to work with Swiss government agencies such as municipalities and cantons. </p><p><p class="c"><img title="" border="0" alt="" src="images/pictures/klblog/683.jpg "/><br/><span class="small"><strong>Information about the Trojan-Dropper.Win32.Mediyes digital signature</strong></span></p>
Source:
Mediyes - the dropper with a valid signature
