Microsoft Disrupts Fox Tempest Ransomware Signing Service (infosecurity-magazine.com)
0xBASE INTEL BRIEF
- Microsoft DCU takes down Fox Tempest infrastructure
- Tool signed ransomware with valid certificates
- Disrupts ransomware ecosystem
"Microsoft's Digital Crimes Unit has taken down the infrastructure of Fox Tempest, a threat group that provided a tool for signing ransomware with valid digital certificates. The tool allowed criminals to bypass security checks by making malware appear legitimate. The takedown disrupts a key enabler for multiple ransomware operations."
no comments yet.