The vulnerability in a verified and authenticated driver that exposes systems to risks – Security Update by Tony Anscombe

Video
A claimed ad blocker promoted as a security measure utilizes a Microsoft-approved driver, inadvertently posing harmful threats to users

Video

A claimed ad blocker promoted as a security measure utilizes a Microsoft-approved driver, inadvertently posing harmful threats to users

21 Jul 2024

The revelations about HotPage have been disclosed by ESET researchers this week, as detailed in their report. HotPage is a browser injector that operates using a driver created by a Chinese firm and endorsed by Microsoft.

This malicious software poses as an “Internet café security application” offering ad-block features. In truth, it exhibits ads related to games and has the ability to alter page content, redirect users, or launch new tabs based on specific criteria.

Furthermore, it unwittingly grants access to other threats to execute code at the highest Windows privilege level – the SYSTEM account.

Delve into the narrative with Tony as he examines the implications and ongoing concerns related to certificate misuse.

Stay connected via Facebook, Twitter, LinkedIn, and Instagram.

About Author

AndyC

Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.

See author's posts