#SigFlip
Malware/Tool
2023-03-30 • Red flags flew over software supply chain-compromised 3CX update
SigFlip is a tool for patching Authenticode-signed Portable Executable files without invalidating their existing signatures. In the 3CX software-supply-chain compromise, attackers used it to append encrypted shellcode to a signed library so the altered component retained apparently valid signature metadata while carrying a malicious loader payload.
-
2
Tagged Reports
-
2
Unique Authors
-
22
Active Days
Tagged Reports
2023-04-20
Mandiant