DigiCert suffers breach, stolen certificates used to sign malware

DigiCert has disclosed a security incident in which attackers compromised internal support systems and abused stolen certificate issuance data to obtain valid EV code signing certificates. Some of the certificates were subsequently used to sign malware tied to the Zhong Stealer family. DigiCert, a major certificate authority trusted by browsers and operating systems worldwide, plays …

The post DigiCert suffers breach, stolen certificates used to sign malware appeared first on CyberInsider.