Alex Sotirov
Summary: Trail of Bits published a June 11, 2012 analysis by Alex Sotirov of the MD5 collision attack used by the Flame malware to infect new machines through Windows Update. The post notes that while MD5 collisions are not new, this was the first such attack discovered in the wild.
Bottom line: Flame turned a known cryptographic weakness into a working infection path through Windows Update, so the trust placed in a vendor's own update channel was the vector.
Read the original at Trail of Bits Blog ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026