#authenticode

@pigondrugs.bsky.social

6 months ago

Investigating Malformed Authenticode Signatures

~Elastic~
Windows can incorrectly flag signed binaries as malformed due to a decade-old heuristic that scans for hardcoded 'invalid markers' within the signature block.
-
IOCs: (None identified)
-
#Authenticode #ThreatIntel #Windows

0 1 0 0

ReconBee

@reconbee.bsky.social

8 months ago

Hackers turn ScreenConnect into malware using Authenticode stuffing while maintaining the digital signature read more about Hackers turn ScreenConnect into malware using Authenticode stuffing

Hackers turn ScreenConnect into malware using Authenticode stuffing reconbee.com/hackers-turn...

#hackers #screenConnect #malware #malwareattack #authenticode #cyberattack

0 0 0 0

Martin Baschpel

@bilbothebird.bsky.social

10 months ago

When Code Signing, what is the point of enhanced security specifically for the private key itself? TL;DR What is the point of having hardware based HSM/FIPS based protection for the private key when the ability to sign is "only" protected by credentials / API keys? Background In the pa...

With Authenticode, what is the point of having hardware based HSM/FIPS protection for the private key when the Ability-To-Sign is only protected by Cloud credentials or API keys?
I really don't get it yet.
#authenticode #codesigning #softwaresecurity

security.stackexchange.com/questions/28...

0 0 0 0