How Signed Productivity Apps Can Hide Malware Like TamperedChef
How Signed Productivity Apps Can Hide Malware Like TamperedChef Most people assume that if a piece of software carries a valid digital signature, it’s safe. That’s the reasoning behind many operating system warnings and enterprise security policies: signed code comes from a verified publisher and hasn’t been tampered with. A newly documented malware campaign called TamperedChef exploits that very trust, using stolen or fraudulently obtained signing certificates to make malicious productivity apps look legitimate. ...