Thursday, March 28, 2024

Digitally Signed Malware Is Increasingly Prevalent, Researchers Say

Datamation content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More.

Computerworld: Security companies say they’re seeing an increase in malware signed with fraudulent digital certificates. The Stuxnet worm was one of the first to use the technique, and now other malware creators have adopted the tactic. Costin Raiu of Kaspersky Labs explained that malware with a digital certificate is particularly troublesome because “signed modules are more likely to be included in whitelisting collections, meaning the chance of them being fully analyzed is lower and they remain undetected for longer period of times.”

In some cases, the hackers use forged certificates, but in others they use stolen certificates, which are particularly difficult to block. If legitimate software is signed with the same credentials, companies cannot simply revoke the certificate or everyone who uses the legitimate software will find that it stops working.

Subscribe to Data Insider

Learn the latest news and best practices about data science, big data analytics, artificial intelligence, data security, and more.

Similar articles

Get the Free Newsletter!

Subscribe to Data Insider for top news, trends & analysis

Latest Articles