Tag: update exploitation framework
-

sh4d0wup: Signing-key abuse and update exploitation framework
sh4d0wup Have you ever wondered if the update you downloaded is the same one everybody else gets or did you get a different one that was made just for you? Shadow updates are updates that officially don’t exist but carry valid signatures and would get accepted by clients as genuine. This may happen if the signing…