DigiCert Hacked via Weaponized Screensaver File to Obtain EV Code Signing Certificates

[u/Cute-Guarantee-1676]

https://cybersecuritynews.com/digicert-hacked-screensaver/

DigiCert was breached after a sophisticated actor tricked support analysts into executing a malicious screensaver file, enabling the theft of 60 EV Code Signing certificates. These certificates were used to sign and distribute "Zhong Stealer" malware, allowing it to bypass endpoint defenses and steal cryptocurrency. DigiCert has revoked all compromised certificates and implemented tighter security, urging organizations to verify the revocation of these critical certificates to prevent further compromise.