4 ms·
Our company has had EV-signed binaries flagged as malware by products from Symantec, F-Secure and Avast. Probably others too, those three I can remember off the
by nikanj 4y ago
Our company has had EV-signed binaries flagged as malware by products from Symantec, F-Secure and Avast. Probably others too, those three I can remember off the top of my head.
- mike_hearn 4y agoYes it's just a signal to AV engines, not a whitelist. Windows Defender is quite respectful of it. Something that can increase the risk of FPs is mixed signing. Like, not signing every DLL and EXE in the program with the same certificate, not signing the installers/packages, only signing the installers/packages and not the contents, etc.