id author title date pages extension mime words sentences flesch summary cache txt arstechnica-com-9344 One-stop counterfeit certificate shops for all your malware-signing needs | Ars Technica .html text/html 1274 95 56 One-stop counterfeit certificate shops for all your malware-signing needs | Ars Technica A report published by threat intelligence provider Recorded Future said that starting last year, researchers saw a sudden increase in fraudulent certificates issued by browserand operating system-trusted providers that were being used to sign malicious wares. campaigns, we confirmed with a high degree of certainty that the certificates are created for a specific buyer per request only and are registered using stolen corporate identities, making traditional network security appliances less effective," Andrei Barysevich, a researcher at Recorded Future, reported. For $1,599, the service sold a signing certificate with extended validation—meaning it was issued to a corporate or business name that had been verified by the issuer. Recorded Future researchers provided one seller with an unreported remote access trojan and convinced the seller to sign it with a certificate that had been recently issued by Comodo. Only two AV engines detected the same encrypted file when it was signed by the Comodo certificate. ./cache/arstechnica-com-9344.html ./txt/arstechnica-com-9344.txt