This is fucking bonkershttps://twitter.com/Securityinbits/status/1271406138588708866 …
Show this thread
-
because it is: 1. Not really their fault 2. Not really their problem 3. Even if it was- I have a hard time beleiving it have been used that much. What gets bypassed here is just end point protection software made by third parties- and only if java is installed
If a third party endpoint protection tool do not scan a file because windows built in signature verification function claims it digitally signed - this method will work. But its not like its usable for bypassing authenticode or the ms signed policy enforcement for pe files.