Malicious code distributed via D-Link certificates – IT Magazine



[ad_1]

July 12, 2018 –
Security expert Eset has discovered various malicious files that have a certificate from the producer of the D-Link network. After informing Eset D-Link, the manufacturer withdrew the certificate. The malware calls Plead and looks for passwords for, among others, Outlook, Firefox, IE and Chrome.

D-Link was the victim of a hacker attack: Plead is the name of the malware that haunts the network with a certificate stolen by the network manufacturer. Eset security specialists have discovered the vulnerability and informed D-Link, and the same and another certificate have been removed, reports "We Live Security".

Software signed with such a certificate can more easily bypass security mechanisms, so cybercriminals use stolen certificates to broadcast two parasites: Plead is a remote-controlled backdoor application, and there is also a related module, Outlook passwords and web browsers like Firefox, Google Chrome or Internet Explorer fly.

Plead is said to be headed by a criminal group called Blacktech and focuses mainly on Taiwanese companies, but also sometimes Japanese and Hong Kong companies. Most likely, attackers are concerned with sensitive business data and data on new technologies.
(RPG)

[ad_2]
Source link