How Cybercriminals Misuse Code Signing Machine Identities

How Cybercriminals Misuse Code Signing Machine Identities

brooke.crothers

Tue, 06/21/2022 - 15:42

• 6 views

Attacks early in the software delivery process

If your pipeline doesn’t require digital signatures of all artifacts used to build your products, anyone could slip in a malicious change and the automation will incorporate that change and produce a malware-infected executable that you deliver to your customers.

Distributing malware in your company’s name

Cybercriminals steal code signing private keys from legitimate companies to sign their malicious …

code code signing cybercriminals identities machine machine identities signing