Tag: Digital Certificates
-
Anomaly detection in certificate-based TGT requests
I identified several signs of attacks that use forged certificates inside the network and developed a Proof-of-Concept utility capable of …
-
Uncommon infection and malware propagation methods
In this report, Kaspersky researchers discuss uncommon infection and propagation methods observed in certain crimeware …
-
A new secret stash for “fileless” malware
We observed the technique of putting the shellcode into Windows event logs for the first time “in the wild” during the malicious …
-
APT10: sophisticated multi-layered loader Ecipekac discovered in A41APT campaign
A41APT is a long-running campaign with activities detected from March 2019 to the end of December 2020. Most of the discovered malware …
-
The Countdown Has Started – Here Come One-Year Digital Certificate Life Cycles
Apple announced its decision to trust only one-year digital certificates1 on its Safari browser in February 2020. This decision created a …
-
Spring Clean Your House of Domains, DNS and Digital Certificates
At the start of the year, many responsible for managing domain name portfolios may be considering spring cleaning! Traditionally, such a …
-
The Life Cycle of Digital Certificates Reduces Again
Recently, there were news articles about a large software provider who experienced a global outage due to an expired digital certificate …
-
Mokes and Buerak distributed under the guise of security certificates
We recently discovered a new approach to the well-known distributing malware technique: visitors to infected sites were informed that some …
-
Let’s Encrypt issues one billionth free certificate
Thanks to this flood of free certificates, the web is a lot more encrypted than it was a few years ago. In June 2017, 58% of webpage loads …
-
Powerful GPG collision attack spells the end for SHA-1
New research has heightened an already urgent call to abandon SHA-1, a cryptographic algorithm still used in many popular online services. …
-
Researchers discover weakness in IoT digital certificates
IoT devices are using weak digital certificates that could expose them to attack, according to a study released over the weekend. …
●●●