Go Back   DreamTeamDownloads1, FTP Help, Movies, Bollywood, Applications, etc. & Mature Sex Forum, Rapidshare, Filefactory, Freakshare, Rapidgator, Turbobit, & More MULTI Filehosts > World News/Sport/Weather > Piracy/Warez/Legal/Hackers/Scams & Internet News

Piracy/Warez/Legal/Hackers/Scams & Internet News Anything Related to Piracy, Warez, Legal Matters, Hackers, Internet News & Scams and How it Affects Sites/Members Can Be Read Here. Please do NOT post links to other Sites, but you May Name Them if They are Scam Sites

IMPORTANT ANNOUNCEMENT
Hallo to All Members. As you can see we regularly Upgrade our Servers, (Sorry for any Downtime during this). We also have added more Forums to help you with many things and for you to enjoy. We now need you to help us to keep this site up and running. This site works at a loss every month and we appeal to you to donate what you can. If you would like to help us, then please just send a message to any Member of Staff for info on how to do this,,,, & Thank You for Being Members of this site.
Post New ThreadReply
 
LinkBack Thread Tools Display Modes
Old 25-11-11, 21:16   #1
 
Ladybbird's Avatar
 
Join Date: Feb 2011
Posts: 34,241
Thanks: 23,060
Thanked 12,655 Times in 8,505 Posts
Ladybbird has a reputation beyond reputeLadybbird has a reputation beyond reputeLadybbird has a reputation beyond reputeLadybbird has a reputation beyond reputeLadybbird has a reputation beyond reputeLadybbird has a reputation beyond reputeLadybbird has a reputation beyond reputeLadybbird has a reputation beyond reputeLadybbird has a reputation beyond reputeLadybbird has a reputation beyond reputeLadybbird has a reputation beyond repute

Awards Showcase
Best Admin Best Admin Gold Medal Gold Medal 
Total Awards: 6

Default Hackers Steal Government Certificate To Distrubute Malware

F-Secure finds rare digitally signed malware






This screen shot shows details of the certificate that was stolen and used to trick computers into trusting malware.

This screenshot shows details of the certificate that was stolen and used to trick computers into trusting malware.
(Credit: F-Secure)

Researchers at F-Secure have uncovered a rarity--malware that is signed with a valid code-signing certificate stolen from a government.

The malware uses a certificate for mardi.gov.my, which is the Agricultural Research and Development Institute of Malaysia. That agency told F-Secure that the certificate had been stolen "quite some time ago." It expired at the end of September so is no longer effective for authentication.

The Trojan program, which F-Secure detected as Agent.DTIW, spreads via malicious PDF files that exploit a vulnerability in Adobe Reader 8, according to the F-Secure blog.

"The malware downloads additional malicious components from a server called worldnewsmagazines.org. Some of those components are also signed, although this time by an entity called www.esupplychain.com.tw," the blog post says.

Code-signing certificates are used to authenticate software so a computer will trust it and run it.

"It's not that common to find a signed copy of malware. It's even rarer that it's signed with an official key belonging to a government," Mikko Hypponen wrote on the blog.

Stolen digital certificates are used by hackers to trick people into visiting malicious Web sites, as well as trick computers into running untrusted code. They were used with Stuxnet, which targeted SCADA (supervisory control and data acquisition) systems, and more recently with the recently discovered Duqu malware.

Being targeted by hackers is a growing problem for certificate authorities that issue the certificates. Dutch DigiNotar filed for bankruptcy after its system was breached and a hacker was able to generate fake certificates. The same hacker claimed credit for that breach, as well as one involving CA Comodo and its resellers earlier this year.

And this isn't the first time there has been an issue with certificates from Malaysia. Earlier this month, Mozilla said that Malaysian certificate authority DigiCert Sdn. Bhd had issued 22 certificates with weak keys. While there was no evidence that the certificates were issued fraudulently, the weak keys allowed the certificates to be compromised, Mozilla said.

Meanwhile, Dutch certificate authority KPN said it was suspending the issuing of certificates after finding a distributed denial-of-service tool on one of its Web servers.


__________________
Nil Carborundum Illegitemi My Advice is Free My Friendship is Priceless

FREEBIES Continue to be a BURDEN on Our Increasing Server/Privacy Costs. Please DONATE Something to HELP...PM an Admin for Further Info.



& Thanks to Those That Have Taken The Time to Register & Become a Member of ... 1...
Ladybbird is online now  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiTweet this Post!
Reply With Quote
The Following 2 Users Say Thank You to Ladybbird For This Useful Post:
claudel24 (02-02-12), FreaknDavid (26-11-11)
Post New ThreadReply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2019, vBulletin Solutions Inc.
SEO by vBSEO 3.5.2
Designed by: vBSkinworks