Back Feeds2.Feedburner

DigiCert breached via malicious screensaver file

Feeds2.Feedburner •Sinisa Markovic • May 4, 2026

A targeted social engineering attack against DigiCert’s support channel led to the compromise of internal systems and the unauthorized issuance of EV Code Signing certificates. DigiCert is a global Certificate Authority (CA) providing digital trust services, specializing in TLS/SSL certificates, PKI management, and IoT security. According to DigiCert’s incident report, a threat actor contacted the support team via a customer chat channel and delivered a malicious ZIP file disguised as a customer screenshot, which contained … More →

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

DigiCert Hacked via Malicious Screensaver File, EV Certificates Stolen In April 2026, DigiCert experienced a breach due to a social engineering attack that compromised its tech support team. An attacker tricked two employees into executing a malicious screensaver file, leading to the theft of 27 code signing certificates. These certificates were subsequently used to sign malware, specifically the Zhong Stealer, linked to the GoldenEyeDog cybercrime group. The breach was discovered when a third-party security researcher reported the misuse of the certificates. DigiCert has since revoked the affected certificates and claims to have blocked further access. The incident highlights vulnerabilities in employee training and system configuration, particularly the misconfiguration of the CrowdStrike EDR agent. The attack's full impact is still being assessed, but it involved the unauthorized processing of 60 EV certificate orders. 4 sources 71

Extracted Entities

DigiCert breached via malicious screensaver file

The full story

Extracted Entities

Attack Types (2)

Companies (1)

MITRE ATT&CK (1)