Has anyone seen any additional information regarding this article? I searched here, but got no hits.
https://www.bleepingcomputer.com/news/security/stealthy-blister-malware-slips-in-unnoticed-on-windows-systems/
the best way to defend against signed malware is the old fashioned "don't trust anyone".
install only programs that you use since ever or don't experiment too much.
There are billions of malware out there, any particular reason, you are worried about this one?
If you did not block windows processes, the certificate is already revoked, windows updates them daily.
Not to mention, when using a secure DNS, c2c requests are blocked and startup entries in a good AV too.
If anything this malware shows that using an outbound firewall is not such a bad idea for some extra security.
Only worried to the extent that I hadn't heard of this one described in the article and was wondering if anyone here had heard of it. I normally like to validate what's written in the press, so when one (even CNET) starts looking like Chicken Little, I want to see what others with a rational view have to say on the particular subject.
Quote