[The Exiled]

Leaked stolen nVidia cert can sign Windows malware

An nVidia code-signing certificate was among the mountain of files stolen and leaked online by criminals who ransacked the GPU giant's internal systems. At least two binaries not developed by nVidia, but signed this week with its stolen cert, making them appear to be nVidia programs, have appeared in malware sample database VirusTotal. This leak means sysadmins should take steps, or review their security policies and defenses, to ensure code recently signed by the rogue cert is detected and blocked as it is most likely going to be malicious. This can be done through Windows configuration, network filtering rules, or whatever you use to police your organization.

Izvor: The Register