Certificates Can Digitally Sign Viruses and Malicious Code Under Microsoft Corporation Name
BEAVERTON, Ore., March 25 /PRNewswire/ — McAfee AVERT (Anti-Virus Emergency Response Team) in conjunction with COVERT Labs (Computer Vulnerability Emergency Response Team) at PGP Security, divisions of Network Associates, Inc. (Nasdaq: NETA), today advised computer users of recently discovered invalid digital certificates issued by VeriSign to an unidentified person posing as a Microsoft employee. The digital certificates, which normally are used to verify authorized issuers, could be used to authenticate viruses and malicious code. AVERT and COVERT report that no damage has been associated with the fraudulent certificates.
Immediate information and defense against the fraudulent certificates can be found online at the McAfee AVERT site located at http://vil.nai.com/vil/virusSummary.asp?virus_k=99058 . McAfee VirusScan users should update their systems from that page and use the 4.0.70 or later scanning engine to stop potential damage.
McAfee AVERT is one of the top-ranked anti-virus research organizations in the world, employing more than 90 researchers in offices on five continents. McAfee AVERT protects customers through McAfee AutoUpdate technology, which allows McAfee anti-virus software to check for updated information on new viruses, and download cures automatically as soon as they are available. Cures are developed by the combined efforts of McAfee AVERT researchers and McAfee AVERT AutoImmune technology, which applies advanced heuristics, generic detection, and active .dat technology to automatically generate cures for previously undiscovered viruses.
COVERT Labs, a part of the PGP Security business unit of Network Associates, identifies and works to resolve serious vulnerabilities before attackers are able to exploit them. Research is focused on widely use products and mission-critical services where a vulnerability could affect a large number of users. By working closely with these vendors, the COVERT Labs at PGP Security help to secure networks and systems around the world.
With headquarters in Santa Clara, Calif., Network Associates, Inc. is a leading supplier of security and availability solutions for e-businesses. Network Associates is comprised of four business units: McAfee, delivering world class anti-virus products; PGP Security, providing firewall, intrusion detection and encryption products; Sniffer Technologies, a leader in network and application management; and Magic Solutions, providing web-based service desk solutions. For more information, Network Associates can be reached at 972-308-9960 or on the Internet at http://www.nai.com .
NOTE: Network Associates, McAfee, PGP, Sniffer, VirusScan, WebShield, NetShield, GroupShield, PrimeSupport, Enterprise SecureCast and Magic Solutions are registered trademarks of Network Associates, Inc. and/or its affiliates in the United States and/or other countries. All other registered and unregistered trademarks