Hackers use stolen Nvidia certificates to conceal malware.

by Hilbert Hagedoorn on: 03/07/2022 09:56 AM | source: bleepingcomputer | 19 comment(s)

Stolen NVIDIA code signing certificates are used in order to seem trustworthy and allow malicious drivers and applications to be installed on Windows.

NVIDIA acknowledged this week that they were the victim of a hack in which threat actors stole employee credentials and confidential data. According to the extortion gang Lapsus$, they obtained 1TB of data during the hack and began distributing it online when NVIDIA declined to bargain with them.

Two stolen code-signing certificates were used by NVIDIA engineers to sign their drivers and executables, according to the leak. Despite the fact that both stolen NVIDIA certificates are expired, Windows will enable a driver certified with the certificates to be installed in the operating system.

Using these stolen certificates, threat actors may make their apps appear to be legal NVIDIA programs, allowing malicious drivers to be installed by Windows.

Related Stories

NVIDIA Data Breach Aftermath Gets more serious, hackers make new demand - 03/02/2022 09:35 AM
The aftermath of the NVIDIA breach is slowly disclosing more and more info about pending products. Yesterday an older version of DLSS source code was already spotted, new GPU architectures have been c...

Ransomware Hackers Demands Nvidia Lite Lift Hash Rate Restriction - 02/28/2022 06:16 PM
Hacker group Lapsus$ obtained access to Nvidia's servers for a week and took 1TB of driver and firmware files. The group is seeking for the Lite Hash Rate limitations on Nvidia GPUs to be lifted....

Hackers abandon ransomware plots and share decryption key - 08/31/2021 09:07 AM
According to Bleeping Computer, the Ragnarok hacking organization has abruptly ceased carrying out ransomware operations and has publicly distributed a key to unlock files that have been encrypted. ...

Acer Hit by Ransomware - Hackers Want $50M - 03/29/2021 08:49 AM
Acer fell victim to the REvil ransomware group responsible for the attack of several other companies over the past months, reported Bleeping Computer. The attackers are demanding $50 million from the ...

Hackers Hijacked ASUS Software Updates and Installed Backdoors on Many PC's and Laptops - 03/25/2019 05:42 PM
ASUS is believed to have pushed malware to hundreds of thousands of customers through its trusted automatic software update tool after attackers compromised the company's server and used it to push t...

4 pages 1 2 3 4

Valken
Senior Member