Blister malware

[Andrew B.]

Blister invades computers as follows:

A valid code signing certificate is used to sign malware to help the attackers remain under the radar of the security community. We also discovered a novel malware loader used in the campaign, which we’ve named BLISTER. The majority of the malware samples observed have very low, or no, detections in VirusTotal.” “The infection vector and goals of the attackers remain unknown at this time.

https://cybersecurityworldconference...ed-as-blister/