Roger A. Grimes

Stolen Extended Validation (EV) certificate used to sign malware

https://blog.polyswarm.io/polykg-discovers-previously-unreported-oilrig-samples-using-stolen-cert

PolyKG Discovers Previously Unreported OilRig Samples Using Stolen Cert

Using PolyKG, PolySwarm analysts have identified previously unreported OilRig activity leveraging a stolen Entrust Extended Validation (EV) code signing certificate issued to Thai IT vendor MOSCII Corporation.

Mar 27 at 4:13pmWeb