eMudhra revokes eight certificates after researchers find weak private keys
The weakness could have allowed attackers to create trusted certificates for fake websites, impersonate legitimate sites, and intercept encrypted communications.
3 min read
Cybersecurity Help is a global vulnerability intelligence provider. We monitor vulnerabilities in software from 60,000+ vendors and help customers prevent potential data breaches by addressing them proactively.
Request DemoThe weakness could have allowed attackers to create trusted certificates for fake websites, impersonate legitimate sites, and intercept encrypted communications.
3 min readThe attackers infected servers with Ebury Linux malware and changed the settings to intercept SSH connections.
2 min readThe groups are using the flaw to gain initial access to corporate networks and bypass multi-factor authentication.
2 min readThe attacks were focused on stealing sensitive information related to national security and defense.
3 min readAccording to Siemens, threat actors used a legitimate, digitally signed copy of the software and malicious DLL files to load the code.
3 min read