Malware Stole Digital Certificates from D-Link

The company in ESET threat detection, reported that a group of cyberespionage stole and used digital certificates from Taiwanese technology companies such as D-Link and evolving information technologies

ESET discovered the malware detection campaign by identifying suspicious files that had been signed with a valid certificate.

"The misuse of digital certificates is one of the ways used by cyber criminals to try to hide their malicious intent, since stolen certificates can hide malware and give the impression to be a legitimate application, increasing the chances that the malicious code manages to escape security measures without arousing suspicion. "awareness of ESET Spain

A remotely controlled backdoor, as well as a malicious component linked to a password theft program, were the two identified malware. These tools are used to obtain information from browsers and applications such as Microsoft Internet Explorer, Microsoft Outlook, Google Chrome or Mozilla Firefox.

After confirming the data, ESET notified D-Link and Changing Information Technologies