Gaming Developers' Digital Certificates Stolen

[gisabun]

In what is being called an advanced persistent threat on gaming companies, cyberthieves have been using malware known as Winnti to steal digital certificates from companies that develop video games. The certificates have been used in attacks against companies in the aerospace industry, the company that operates South Korea's largest social network, and political activists. It is unclear whether all the attacks were launched by the same organization that originally planted Winnti, or whether the certificates were provided to others who used them in different attacks. The thieves also appear to be mapping the network architecture of the developers' production servers and stealing source code from them.

http://www.v3.co.uk/v3-uk/news/2261032/ ... hinese-apt
http://www.wired.com/threatlevel/2013/0 ... ts-stolen/
http://www.theregister.co.uk/2013/04/11 ... espionage/