Dec 17, 2020

Operation SignSight: Supply‑chain attack against a certification authority in Southeast Asia

Posted by in category: government

ESET researchers have uncovered a supply-chain attack on the website of a government in Southeast Asia.

Just a few weeks after the supply-chain attack on the Able Desktop software, another similar attack occurred on the website of the Vietnam Government Certification Authority (VGCA): The attackers modified two of the software installers available for download on this website and added a backdoor in order to compromise users of the legitimate application.

Leave a reply