Certificate-stealing Trojan

[Rose, Greg]

On 2010 Sep 24, at 12:47 , Steven Bellovin wrote:

> Per http://news.softpedia.com/news/New-Trojan-Steals-Digital-Certificates-157442.shtml there's a new Trojan out there that looks for a steals Cert_*.p12 files -- certificates with private keys.  Since the private keys are password-protected, it thoughtfully installs a keystroke logger as well....

Ah, the irony of a trojan stealing something that, because of lack of PKI, is essentially useless anyway...

100 years from now they'll be blaming the trojan for lack of a certificate infrastructure.

Greg.

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com