zlacker

>>Zuider+(OP)
Hmmm maybe i should keep windows offline for a few days…..

>>bratwu+B8
If malware makes it onto your machine, it's already game over. The certificate allows the attacker to load an arbitrary driver, but the attacker doesn't need that to steal all your data.

relevant xkcd: https://xkcd.com/1200/

>>gruez+5v
Then why are malware authors exploiting this vulnerability?

>>ec1096+eK
Because some corporate environments only allow you to run signed executables. "Defense in depth" :)

>>hulitu+fU
So it’s effective in those environments?

>>ec1096+5E1
> So it’s effective in those environments?

No. Those environments will happyly install the malware code because it is signed by Microsoft.