AfterDawn: Tech news

Bit9 hacked, customers targeted with malware

Written by James Delahunty (Google+) @ 10 Feb 2013 10:33 User comments (1)

Bit9 hacked, customers targeted with malware Security firm hacked because it wasn't running its own software.
Bit9, a company that provides security solutions to customers, said it was hacked and a number of its customers were targeted with malware. It admitted that it could have avoided the hack if it had implemented its own software properly on its network.

Bit9 is a "white listing" service provider with customers that range from government agencies to financial firms. White listing protects systems from being attacked by only allowing software from trusted vendors.

The hackers breached a system that Bit9 uses to digital sign its software so that its customers know its safe to run on their systems. They then signed malware using Bit9's digital signature and pushed it out to several of its customers.

"Due to an operational oversight within Bit9, we failed to install our own product on a handful of computers within our network," Chief Executive Patrick Morley wrote.

"As a result, a malicious third party was able to illegally gain temporary access to one of our digital code-signing certificates that they then used to illegitimately sign malware."

In 2011, a similar attack was made against RSA Security, when hackers stole information about its SecurID system. Two months after the breach, the hackers used the information to launch attacks against Lockheed Martin.

Tags: Bit9
Previous Next  

1 user comment

110.2.2013 13:01

Now this doesnt shock me at all.

Why most of these so called security firms that store your data dont tell you hi where running windows server 2003 or hi where running the latest windows server version which has been hack bent over a table patched and taken for a ride.

Even as a beta tester i had to test the 30 day trial for windows server 2003 within 5 minutes i had ti activated the timebomb removed replaced the driver cab from a legit version of windows xp pro and installed a service pack done

Comments have been disabled for this article.

Latest news

A bug in Chrome allows you to download Netflix movies A bug in Chrome allows you to download Netflix movies (25 Jun 2016 15:21)
A group of security researchers have found a vulnerability in Google's Chrome browser that allows downloading movies straight from Netflix. This is obviously not a feature especially the entertainment ....
2 user comments
Three out of four Netflix customers would rather cancel than watch ads Three out of four Netflix customers would rather cancel than watch ads (25 Jun 2016 14:05)
For a long time Netflix was adamant on its pricing. No changes were made for a long time and everything seemed to be good. The markets obviously reacted and more expensive deals and original ....
3 user comments
Apple Music left in the dust, Spotify at 100 million subscribers Apple Music left in the dust, Spotify at 100 million subscribers (25 Jun 2016 12:01)
Spotify has told The Telegraph that it has surpassed the 100 million mark in subscribers. Paying subscribers was earlier this year reported to have passed 30 million. Apple meanwhile is having ....
2 user comments
Rumor has it that Apple has cancelled iPhone's dual camera Rumor has it that Apple has cancelled iPhone's dual camera (18 Jun 2016 18:05)
The next iPhone will be a major upgrade to current iPhone 6s. This biyearly full upgrade cycle provides us with a bigger upgrade every two years. But how will Apple update its number one product, ....
6 user comments
OnePlus releases new flagship killer, smaller X discontinued OnePlus releases new "flagship killer", smaller X discontinued (18 Jun 2016 16:11)
The small Chinese smartphone maker OnePlus took the world by storm two years ago by releasing a super cheap flagship smartphone. They called it the flagship killer, and it indeed challenged ....
4 user comments

News archive