Microsoft takes down 'Fox Tempest' cybercrime service which used legitimate platforms to hide dangerous…
- Microsoft disrupts Fox Tempest operation which abused Azure Artifact Signing to issue fraudulent code‑signing certificates
- The group created over 1,000 certificates and hundreds of Azure tenants, enabling malware campaigns to bypass security controls
- Legal action was launched against Fox Tempest and Vanilla Tempest, whose services supported major malware and ransomware distribution
Microsoft has taken down a malicious service that offered digitally signed certificates to hackers, and has launched a legal case against the operation’s perpetrators.
In its report the company said a threat actor known as Fox Tempest used Azure Artifact Signing to create temporary certificates. These certificates allowed malware to be signed as legitimate software, bypassing antivirus protections and compromising victim devices.
To access the service, the miscreants allegedly used different identities, stolen from people in the United States and Canada. To minimize the chances of being spotted, they created certificates that were only valid for 72 hours -...
Copyright of this story solely belongs to techradar.com. To see the full text click HERE
