Operation SignSight: Supply‑chain attack against a certification authority in Southeast Asia
Share ESET researchers have uncovered a supply-chain attack on the website of a government in Southeast Asia. Just a few weeks after the supply-chain attack on the Able Desktop software, another similar attack occurred on the website of the Vietnam Government Certification Authority (VGCA): ca.gov.vn. The attackers modified two of the software installers available for download on this website and added a backdoor in order to compromise users of the legitimate application. ESET researchers uncovered this new supply-chain attack in early December 2020 and notified the compro...
Source: welivesecurity.com