Author Topic: Accusations that Realtek staff helped malcreants to certificate ....now false  (Read 3101 times)

0 Members and 1 Guest are viewing this topic.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33891
  • malware fighter
Hi malware fighters,

Read here: http://blogs.pcmag.com/securitywatch/2010/07/certificate_used_to_code-sign.php
One theory is the malware was produced in India and aid came from an insider from the Realtek application developers. MS is studying the new USB-sick malware: http://twitter.com/msftsecresponse/statuses/18646855973
I reported on this new root kit malware here:
http://forum.avast.com/index.php?topic=52252.msg522778#msg522778

polonus
« Last Edit: July 20, 2010, 11:28:56 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33891
  • malware fighter
Re: Accusations that Realtek staff helped malcreants to certificate ....
« Reply #1 on: July 20, 2010, 08:18:58 PM »
Hi malware fighters,

Now on second thought it could well be that the Realtek networks were being compromised by Zeus:
http://www.securelist.com/en/blog/2234/Stuxnet_and_stolen_certificates


polonus
« Last Edit: July 21, 2010, 03:58:23 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33891
  • malware fighter
Hi malware fighters,

New developments, interesting new info on the malware involved in this Stuxnet Sting issue and the certificate withdrawn: http://blog.eset.com/2010/07/19/win32stuxnet-signed-binaries

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!