[tl;dr] using tools such as virustotal, it is possible to find leaked code signing certificates For some, the password can be cracked, after which they can be used to sign malicious code In this blog post i explain this process, including responsible disclosure measures. Here's how to defend against it. The leaked certificates represent authentication keys that validate legitimate access to protected content, and their compromise undermines the fundamental trust model upon which drm systems operate Explore the attack types and cases of official app signature certificate leakages and ahnlab’s complex response system against such malicious behavior
WATCH
