: Microsoft admits to signing rootkit malware in supply-chain fiasco #IndiaNEWS #Microsoft Tech giant Microsoft has now confirmed signing a malicious driver being distributed within gaming environments.
Microsoft admits to signing rootkit malware in supply-chain fiasco #IndiaNEWS #Microsoft
Tech giant Microsoft has now confirmed signing a malicious driver being distributed within gaming environments.
According to Bleeping Computers, this driver, called Netfilter, is a rootkit that was observed communicating with Chinese command-and-control (C2) IPs.
G Data malware analyst Karsten Hahn first took notice of this event last week and was joined by the wider infosec community in tracing and analyzing the malicious drivers bearing the seal of Microsoft.
This incident has once again exposed threats to software supply-chain security, except this time it stemmed from a weakness in Microsofts code-signing process.
Microsoft said it is actively investigating this incident, although thus far, there is no evidence that stolen code-signing certificates were used.
The mishap seems to have resulted from the threat actor following Microsofts process to submit the malicious Netfilter drivers and managing to acquire the Microsoft-signed binary in a legitimate manner.
Microsoft is investigating a malicious actor distributing malicious drivers within gaming environments, the company was quoted as saying by the website.
We have suspended the account and reviewed their submissions for additional signs of malware, said Microsoft yesterday.
According to Microsoft, the threat actor has mainly targeted the gaming sector specifically in China with these malicious drivers and there is no indication of enterprise environments having been affected so far.
Stock Market NEWS Best intraday tips Intraday Stocks below 100
0 Reactions React
More posts by @IndiaNEWS
: Everest wins creative mandate for Oaktree #IndiaNEWS #Industry Updates Everests launch campaign for Oaktree International school focuses on the quality of education that Oaktree promises through
0 Reactions React
: LinkedIn formally joins EU Commission’s Code of Conduct on countering hate speech #IndiaNEWS #LinkedIn LinkedIn has formally signed up to the European Commissions (EU) Code of Conduct on Countering
0 Reactions React
0 Comments
Sorted by latest first Latest Oldest Best
Terms of Use Create Support ticket Your support tickets Powered by ePowerPress Stock Market News! Top Seo SMO © hashkaro.com2024 All Rights reserved.