Categories

Login

Security >>>

Bolehland government achieves another Boleh

(adsbygoogle = window.adsbygoogle || []).push({});

How you trust Malaysian government website if their sign certificate also stolen and used by malware?

Their IT staff must be graduated from a third-world apartheid university.

Researchers spot malware using a stolen government certificate

By Dancho Danchev | November 15, 2011, 8:45am PST

Summary: Researchers from F-Secure have spotted a digitally signed malware using a stolen government certificate belonging to the Malaysian Agricultural Research and Development Institute.

Researchers from F-Secure have spotted a digitally signed malware using a stolen government certificate belonging to the Malaysian Agricultural Research and Development Institute.

From F-Secure’s post:

Every now and then we run into malware that has been signed with a code signing certificate. This is problematic, as an unsigned Windows application will produce a warning to the end user if he downloads it from the web — signed applications won’t do this. Also some security systems might trust signed code more than unsigned code.

In some of these cases, the certificate has been created by the criminals just for the purpose for signing malware. In other cases they steal code signing certificates (and their passphrases) so they can sign code as someone else. We recently […]