Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

With DUQU and Stuxnet, the agencies had stolen the signing cert from Taiwanese businesses.

Duqu = stolen from https://en.wikipedia.org/wiki/C-Media Stuxnet = stolen from https://en.wikipedia.org/wiki/Realtek

Not hard to find a valid cert when you're a nation state.

Source: https://firstlook.org/theintercept/2014/11/12/stuxnet/



"stolen"


Are you suggesting they were acquired by other means?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: