GoldenEyeDog Hackers Exploit DigiCert Breach to Hijack Code-Signing Certificates

• •GoldenEyeDog exploited DigiCert to hijack code-signing certificates.
• •Attackers intercepted customer activation codes to sign malicious files.
• •The breach raises serious concerns about code-signing security.

The GoldenEyeDog hacking group, linked to the Golden Gh0st malware, has breached DigiCert, compromising code-signing certificates. This breach allowed attackers to intercept customer certificate activation codes and sign malicious files. The incident raises significant concerns regarding the security of code-signing processes and the potential for widespread exploitation. Affected systems include those relying on DigiCert for secure code-signing. The breach highlights vulnerabilities in certificate management and the risks posed by state-linked cybercrime. Current investigations are ongoing to assess the full scope of the breach and its implications for affected organizations.