Certification path of the certificate that was used to sign WUSetupV.exe used by the Flame malware [pic]:
https://twitter.com/#!/mikko/status/209620723973636096 Juha-Matti Shreyas Zare [[email protected]] wrote: > On Mon, Jun 4, 2012 at 7:21 PM, Georgi Guninski <[email protected]> wrote: > > > > http://technet.microsoft.com/en-us/security/advisory/2718704 > > Microsoft is aware of active attacks using unauthorized digital > > certificates derived from a Microsoft Certificate Authority. > > > > what does this mean? > > > > m$ inadvertently gave signing rights to lusers, they got rooted > > or something else? > > > https://blogs.technet.com/b/srd/archive/2012/06/03/microsoft-certification-authority-signing-certificates-added-to-the-untrusted-certificate-store.aspx?Redirected=true > > https://www.securityweek.com/microsoft-unauthorized-certificate-was-used-sign-flame-malware > > > Shreyas Zare > > Sr. Information Security Researcher > Secfence Technologies > www.secfence.com > _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
