[telecom] Hackers Breached Adobe Server in Order to Sign Their Malware

Hackers Breached Adobe Server in Order to Sign Their Malware

BY KIM ZETTER

09.27.12

The ongoing security saga involving digital certificates got a new and disturbing wrinkle on Thursday when software giant Adobe announced that attackers breached its code-signing system and used it to sign their malware with a valid digital certificate from Adobe.

Adobe said the attackers signed at least two malicious utility programs with the valid Adobe certificate. The company traced the problem to a compromised build server that had the ability get code approved from the company's code-signing system.

Adobe said it was revoking the certificate and planned to issue new certificates for legitimate Adobe products that were also signed with the same certificate, wrote Brad Arkin, senior director of product security and privacy for Adobe, in a blog post.

...

formatting link

Inappropriate Use of Adobe Code Signing Certificate

formatting link

read more and respond »

Posted 5 years ago by Monty Solomon in General Telecommunications Forum

Report misuse

Image for [telecom]  Hackers Breached Adobe Server in Order to Sign Their Malware