lazarusholic

Everyday is lazarus.dayβ

3CX SmoothOperator Authenticode Abuse

2023-04-05, struppigel
https://www.youtube.com/watch?v=jCXIKHCpvn8
#SupplyChain #3CXDesktopApp #SmoothOperator #Youtube

Contents

SmoothOperator abuses Microsoft Authenticode signatures to seem valid. Here is an explanation how it works and how to detect it in files.