Threat groups using stolen Nvidia certificates to sign malware

clock • 3 min read
Code-signing certificates mean that malware is recognised as coming from Nvidia
Image:

Code-signing certificates mean that malware is recognised as coming from Nvidia

The hacking gang Lapsus$ compromised Nvidia last week and is leaking information as the fallout for declined negotiations

Threat actors have begun to use stolen Nvidia code-signing certificates to sign malware, making it appear trustworthy to Windows in some circumstances. Last week, researchers discovered at least...

To continue reading this article...

Join Computing

  • Unlimited access to real-time news, analysis and opinion from the technology industry
  • Receive important and breaking news in our daily newsletter
  • Be the first to hear about our events and awards programmes
  • Join live member only interviews with IT leaders at the ‘IT Lounge’; your chance to ask your burning tech questions and have them answered
  • Access to the Computing Delta hub providing market intelligence and research
  • Receive our members-only newsletter with exclusive opinion pieces from senior IT Leaders

Join now

 

Already a Computing member?

Login

You may also like
EU approves €1.2 billion to boost local cloud

Cloud Computing

Aims to develop alternative to Big Three providers

clock 07 December 2023 • 2 min read
Microsoft warns of Russian hackers targeting vulnerable Outlook email accounts

Threats and Risks

Uses a vulnerability that was patched in March

clock 05 December 2023 • 2 min read
UK Home Office inks £450 million cloud deal with AWS amidst growing scrutiny

Government

Deal comes at a time when Amazon and rival Microsoft face increased scrutiny from the UK competition regulator

clock 04 December 2023 • 2 min read

More on Threats and Risks

Microsoft warns of Russian hackers targeting vulnerable Outlook email accounts

Microsoft warns of Russian hackers targeting vulnerable Outlook email accounts

Uses a vulnerability that was patched in March

John Leonard
clock 05 December 2023 • 2 min read
Microsoft warns of new ransomware campaign by the Twisted Spider group

Microsoft warns of new ransomware campaign by Twisted Spider group

Uses malvertising to spread Danbot Trojan, then Cactus ransomware

John Leonard
clock 01 December 2023 • 2 min read
Google rushes out patch for Chrome zero-day with exploit available in the wild

Google rushes out patch for Chrome zero-day with exploit available in the wild

Other Chromium-based browsers are also vulnerable to the flaw in the Skia graphics library

clock 30 November 2023 • 3 min read