TECH NEWS

Microsoft disrupts alleged malware-signing operation used by ransomware gangs

Microsoft shuts down illegal code-signing operation used by ransomware crims to mask their malware

'Thousands' of US victims, including 12+ machines owned and operated by Redmond

Microsoft seized websites and took down hundreds of virtual machines running a cybercrime service that allegedly sold code-signing certificates to ransomware gangs, thus making their malware look like legitimate software – and allowing criminals to infect thousands of machines in the US, including at least 12 owned and operated by the Windows giant.

The malware signing-as-a-service operation called Fox Tempest has been around since May 2025, and abuses Microsoft’s Artifact Signing code-signing service. This service allows developers to digitally sign their software applications, signaling to the Windows operating system and end-user that the software is authentic, and hasn’t been tampered with.

Since May 2025, the Fox Tempest crew – referred to as John Doe 1 and 2 in court documents unsealed on Tuesday –...

Copyright of this story solely belongs to theregister.com. To see the full text click HERE

Microsoft disrupts alleged malware-signing operation used by ransomware gangs

Microsoft shuts down illegal code-signing operation used by ransomware crims to mask their malware

Read more

GitHub says it's investigating “unauthorized access” to its internal repositories, and there's no proof of customer data outside its repositories being impacted

AI sackings reach New Zealand, which will use it to eject 14 percent of government staff

Q&A with Google SVP James Manyika on AI's ability to automate tasks versus occupations, his optimism about the labor market despite AI-driven layoffs, and more

Sources: a draft White House EO would create a “voluntary framework” for AI companies to give government agencies early access to models before public release