5 ms·
I've read that there are three stolen Microsoft Authenticode certificates being used by stuxnet authors to sign the malware. I've used these sort of certs mysel
by 16s 16y ago
I've read that there are three stolen Microsoft Authenticode certificates being used by stuxnet authors to sign the malware. I've used these sort of certs myself to sign executables. They require passphrases to use. I could believe that they cracked one passphrase to use one cert, but three? All from different companies too.
- mfukar 16y agoIt's much more likely that the certificate used were stolen (from Realtek Semiconductor Corp.), than cracked.
- illumin8 16y agoI find it more likely that the certificates were given to them by an employee that also shared the passcode.
- mfukar 16y agoSaid employee also kept her mouth shut? I don't know, conspiracy theories are not my forte.
- 16s 16y agoYes, but the point is that in order to use a stolen cert, you need the passcode and the cert. They somehow got three certs and three passcodes from three different companies.
- mfukar 16y agoThat's right. However, I think that if I were in a position to steal a certificate, it'd be trivial to also get the pass[code|phrase|whatever], assuming there even was one to begin with. ;-)
- ralphc 16y agoRealtek and JMricron were in the same building, maybe the third company is as well?
- ww520 16y agoSometimes companies embed the passcode in the build script to automate the build process. Having to type in the passcode every time to build a release can become a chore.