Malware attack on Kaspersky Lab used stolen Foxconn certs

[PeaceKeeper]

Talk about some frightening stuff here.

Kaspersky Lab has revealed a few more technical details about the malware used in the recent intrusion into its systems, which the company has christened "Duqu 2.0." The report includes a worrisome detail: a 64-bit Windows driver used by the malware platform is digitally signed by none other than Foxconn Technology Group, one of the world's largest electronics manufacturers. You might know some of their clients, like Apple, Microsoft, and Google.

Source: The Tech Report

[Lazy8s]

I use Kaspersky at home. Time to change maybe?

EDIT: A link from the comments section that gives more detail on the group behind this.

http://arstechnica.com/security/2015...found-at-last/

[bittermann]

I use Kaspersky at home. Time to change maybe?

EDIT: A link from the comments section that gives more detail on the group behind this.

http://arstechnica.com/security/2015...found-at-last/

We use Kaspersky Lab's at work...I was the one that tested all the Business Security and PCI DSS compliant software and recommend them.

It doesn't affect us (hopefully) but still doesn't look good.

[Lazy8s]

We use Kaspersky Lab's at work...I was the one that tested all the Business Security and PCI DSS compliant software and recommend them.

It doesn't affect us (hopefully) but still doesn't look good.

I'm in the unenviable position of not knowing enough about how all this affects home users to make the call.

I'm seriously thinking of saying the heck with it and going with the free Norton from Comcast when I get home.

[Lupine]

Interesting stuff. I'm not sure I read this as an indictment of Kaspersky though.

Some more info via Arstechnica:

Stepson of Stuxnet stalked Kaspersky for months, tapped Iran nuke talks (June 10, 2015)

Stuxnet spawn infected Kaspersky using stolen Foxconn digital certificates (June 15, 2015)