‘Evilgrade’ Gets an Upgrade
Summary: InfoByte Security Research's Francisco Amato upgraded Evilgrade, a toolkit that hijacks the auto-update process of more than 60 legitimate programs, including iTunes, Java, Skype, Winamp, and security applications Superantispyware, Sunbelt, and Panda Antirootkit. The tool exploits vendors that do not properly sign their updates, and a video demonstrates it working against Java 6 Update 22; an attacker needs only control of the network and a victim running one of the targeted applications.
Bottom line: More than 60 programs can be spoofed on any network an attacker controls, and the list includes security tools users installed to protect themselves - so an update prompt on an untrusted network is a delivery mechanism, not a patch.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026