Kaspersky Lab spots malware signed with stolen digital certificate

Security firm Kaspersky Lab Thursday said it’s identified a malicious program that appears to make use of a compromised Symantec VeriSign digital certificate issued to Conpavi AG, which is known to work with Swiss government agencies. Kaspersky says it has asked Symantec VeriSign to revoke the compromised certificates.

Kaspersky says the malicious program contains what’s being called Trojan-Dropper.Win32.Mediyes. A dropper file is a type of malware commonly used by attackers to seed targeted computers in order to easily drop other malware into it in the future for a wide variety of purposes — via redwolf.newsvine.com