Certified online banking trojan in the wild

h-online.com

17 pointsyk2 comments

Why in the hell would operating systems keep signers that expired? If there is no longer an organization backing a key, IT SHOULD NOT WORK.

"...the certificate in question was issued by the DigiCert Certificate Authority..." which is still a going concern:

The problem in this case was that the certificate was issued to a company (NS Autos) that was liquidated in 2011. Oops!