2 ms·
The interesting part is it looks like they somehow got hold of the SolarWinds signing key to sign the binary.
by eloff 6y ago
The interesting part is it looks like they somehow got hold of the SolarWinds signing key to sign the binary.
- tyu2 6y agoI'm not sure why you say it's interesting, signed binaries was always known to be a useless measure against APT level threats, getting signing keys is probably the easiest thing at that level. I remember Microsoft even publicly admitted they can't do shit against APT, so all of their "security" PR is essentially not real security, but that's been a thing with all megacorps for years now.
- stevemk14ebr 6y agoGetting _a_ signing key is not equal to having access to SolarWind's signing key. It is interesting because it shows the extent of the breach.