HardOCP News
[H] News
- Joined
- Dec 31, 1969
- Messages
- 0
The Microsoft Security Response Center blog has issued a warning about the new Flame virus. Hit the link for all the info or fire up Windows Update for the patch.
We have discovered through our analysis that some components of the malware have been signed by certificates that allow software to appear as if it was produced by Microsoft. We identified that an older cryptography algorithm could be exploited and then be used to sign code as if it originated from Microsoft. Specifically, our Terminal Server Licensing Service, which allowed customers to authorize Remote Desktop services in their enterprise, used that older algorithm and provided certificates with the ability to sign code, thus permitting code to be signed as if it came from Microsoft.