Stolen certificates from D-Link used to sign password-stealing malware | Ars Technica

(情報元のブックマーク数

D-LINKの開発者証明書が盗まれたらしく、マルウエアで使われれていた模様。速攻Expireしたみたい(revokeか)

Criminals recently stole code-signing certificates from router and camera maker D-Link and another Taiwanese company and used them to pass off malware that steals passwords and backdoors PCs, a researcher said Monday.
The certificates were used to cryptographically verify that legitimate software was issued by D-Link and Changing Information Technology. Microsoft Windows, Apple’s macOS, and most other operating systems rely on the cryptographic signatures produced by such certificates to help users ensure that executable files attached to emails or downloaded on websites were developed by trusted companies rather than malicious actors masquerading as those trusted companies.

Stolen certificates from D-Link used to sign password-stealing malware | Ars Technica

screenshot