Skip to content

ESET discovers operation SignSight: Supply-chain attack against a certification authority in Southeast Asia

BRATISLAVA, MONTREAL – ESET Research discovered another supply-chain attack in Asia, this time on the website of the Vietnam Government Certification Authority (VGCA). The attackers modified two of the software installers available for download on this website by adding a backdoor in order to compromise users of the legitimate application. Supply-chain attacks appear to be a quite common compromise vector for cyberespionage groups. Cybercrime operation SignSight leverages malware known as PhantomNet or Smanager.

“In Vietnam, digital signatures are very common, as digitally signed documents have the same level of enforceability as wet signatures. In addition to issuing certificates, the VGCA develops and distributes a digital signature toolkit. It is used by the Vietnamese government, and probably by private companies, to sign digital documents. The compromise of a certification authority website is a good opportunity for APT groups, since visitors are likely to have a high level of trust in a state organization responsible for digital signatures,” explains Matthieu Faou, one of ESET’s researchers investigating the SignSight operation.

The PhantomNet backdoor is quite simple and is able to collect victim information (computer name, hostname, username, OS version, user privileges [admin or not], and the public IP address) as well as install, remove and update malicious plugins. These additional and more complex plugins are probably only deployed on a few selected machines. By also installing the legitimate program, the attackers make sure that this compromise won’t be easily noticed by end users.

ESET researchers uncovered this new supply-chain attack in early December 2020 and notified the compromised organization and the VNCERT. We believe that the website ceased delivering compromised software installers at the end of August 2020. The Vietnam Government Certification Authority confirmed that they were aware of the attack before our notification and that they notified the users who downloaded the trojanized software.

ESET has seen victims in the Philippines in addition to Vietnam.

For more technical details about operation SignSight, read the blog post “Operation SignSight: Supply- chain attack against a certification authority in Southeast Asia” on WeLiveSecurity. Make sure to follow ESET Research on Twitter for the latest news from ESET Research.

Partnership Will Drive Increased Adoption of Portnox’s Cutting-Edge NAC Solution Purpose-Built for Large Distributed Organizations in the Region

LONDON — Portnox, which supplies network access control (NAC), visibility and device risk management to organizations of all sizes, today announced that it has partnered with Distology for the sole distribution and resell of its cloud-delivered NAC-as-a-Service solution in the United Kingdom and Ireland.

We chose to partner with Distology because of their successful history of IT security solution distribution in the UK and Irish markets, said Portnox CEO, Ofer Amitai. Were confident this collaboration will yield tremendous growth for both parties, as Portnox has a unique value proposition and Distology has the market enablement expertise to effectively evangelize our network security offering.

We have a long-established relationship with Portnox and it speaks volumes that the team have decided to choose Distology as their sole UK&I distributor. The technology Portnox brings to the market is incredibly exciting and complements our existing vendor stack effortlessly, said Stephen Rowlands, Head of Sales for Distology. Were especially looking forward to representing and promoting Portnox Clear to our growing partner base, as this brand-new cloud-based technology has potential to completely disrupt the market and we foresee masses of growth potential in this innovative product.

Portnox introduced its cloud-delivered NAC-as-a-Service solution to the UK & Irish markets less than two years go. As the first to bring NAC to the cloud, Portnox has quickly gained a foothold in the region, particularly among large distributed enterprises in the retail, construction and utilities industries.

The adoption of our NAC-as-a-Service product in the UK has been very strong to date, said VP of Products, Tomer Shemer. This is a testament to the fact that the UK is one of the markets leading the trend of cloud security adoption. We expect to see continued growth in the coming years in this area of Europe.

Portnox is set to exhibit at this week’s RSA 2020 Conference (booth #4234) in San Francisco, February 24-28. Additionally, Portnox (booth #G108) and Distology (booth #C40) will both be exhibiting at InfoSec Europe 2020, Europes largest event for information and cyber security, in London, June 2-4.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About Portnox
Portnox provides simple-to-deploy, operate and maintain network access control, security and visibility solutions. Portnox software can be deployed on-premises, as a cloud-delivered service, or in hybrid mode. It is agentless and vendor-agnostic, allowing organizations to maximize their existing network and cybersecurity investments. Hundreds of enterprises around the world rely on Portnox for network visibility, cybersecurity policy enforcement and regulatory compliance. The company has been recognized for its innovations by Info Security Products Guide, Cyber Security Excellence Awards, IoT Innovator Awards, Computing Security Awards, Best of Interop ITX and Cyber Defense Magazine. Portnox has offices in the U.S., Europe and Asia. For information visit http://www.portnox.com, and follow us on Twitter and LinkedIn.。

About Distology
Distology is a Market Enabler and offers true value for the distribution of disruptive IT Security solutions. The vendors we work with represent innovative and exciting technology that continues to excite and inspire their reseller network. Our ethos is based on trust, relationships, energy and drive and offers end to end support in the full sales cycle providing vendor quality technical and commercial resource.

BRATISLAVA, MONTREAL – ESET researchers have recently discovered websites distributing trojanized cryptocurrency trading applications for Mac computers. These were legitimate apps wrapped with GMERA malware, whose operators used them to steal information, such as browser cookies, cryptocurrency wallets and screen captures. In this campaign, the legitimate Kattana trading application was rebranded – including setting up copycat websites – and the malware was bundled into its installer. ESET researchers saw four names used for the trojanized app in this campaign: Cointrazer, Cupatrade, Licatrade and Trezarus.

“As in previous campaigns, the malware reports to a Command & Control server over HTTP and connects remote terminal sessions to another C&C server using a hardcoded IP address,” says ESET researcher Marc-Etienne M.Léveillé, who led the investigation into GMERA.

ESET researchers have not yet been able to find exactly where these trojanized applications are promoted. However, in March 2020, the legitimate Kattana site posted a warning suggesting that victims are approached individually to lure them to download a trojanized app, thus pointing to social engineering. Copycat websites are set up to make the bogus application download look legitimate. The download button on the bogus sites is a link to a ZIP archive containing the trojanized application bundle.

In addition to the analysis of the malware code, ESET researchers have also set up honeypots (research computers) and lured GMERA malware operators to remotely control the honeypots. The researchers’ aim was to reveal the motivations behind this group of criminals. “Based on the activity we have witnessed, we can confirm that the attackers have been collecting browser information, such as cookies and browsing history, cryptocurrency wallets and screen captures,” concludes M.Léveillé.

For more technical details on the latest GMERA malicious campaign, read the full blogpost, “Mac cryptocurrency trading application rebranded, bundled with malware,” on WeLiveSecurity. Make sure to follow ESET Research on Twitter for the latest news from ESET Research.


About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About ESET
For 30 years, ESET® has been developing industry-leading IT security software and services for businesses and consumers worldwide. With solutions ranging from endpoint security to encryption and two-factor authentication, ESET’s high-performing, easy-to-use products give individuals and businesses the peace of mind to enjoy the full potential of their technology. ESET unobtrusively protects and monitors 24/7, updating defenses in real time to keep users safe and businesses running without interruption. Evolving threats require an evolving IT security company. Backed by R&D facilities worldwide, ESET became the first IT security company to earn 100 Virus Bulletin VB100 awards, identifying every single “in-the-wild” malware without interruption since 2003.

5 Best Ways to Ensure Internet Security at Home

In the COVID-19 era, businesses in Singapore have steadily moved towards remote work arrangements. Similarly, schools have also had to navigate the new normal with the introduction of home-based learning (HBL). The government has announced that these new arrangements are here to stay even post-pandemic. As families spend more time on their devices at home, internet security has become very important to many people. What can you do to ensure that your family is using technology safely at home? Read on to learn 5 of the best ways you can protect your home from cybersecurity threats.

Manage your passwords

Do you use the same password across different online accounts? Or keep a list of all your passwords on a note in your phone? These are just some examples of bad password management habits that you should avoid.

For all your online accounts, use only strong passwords that are not easy to guess. A strong password consists of a combination of alphabets, numbers, and special characters; and should be 10-15 characters long.

Always use a different password for every account. If you are using the same password for all your accounts and someone hacks into one of them, then your other accounts might also get compromised. Using a unique password will ensure that a single cybersecurity threat won’t affect all of your online activities.

Remember to change your passwords regularly and not keep the same password for years. This will not only help to ensure internet security at home but also protect you against unauthorised users who might be lurking.

Avoid becoming overwhelmed by a large number of different passwords by using a password manager. It stores and protects your login credentials in an encrypted format, allowing you to use them directly in web forms.

ESET Smart Security Premium is an antivirus software that offers a password manager for all your devices. If you are running out of ideas for passwords, ESET Password Manager’s built-in password generator feature will provide suggestions for strong passwords automatically. It provides the ultimate internet security for Windows and internet security for Mac, ensuring that all your devices are protected.

Invest in up-to-date antivirus software

Singapore has seen a rise in phishing scams. For example, hackers can pose as bank employees and use emails to trick users into revealing their internet banking credentials. Hackers can also use very accurately designed notifications from big companies like Microsoft, Google or Facebook, citing “unusual sign-in activity detected from your account”. According to a Cyber Security Agency of Singapore (CSA) report, 47,500 phishing cases were reported in Singapore last year, which is 3 times more than the cases in 2018.

Maintaining an up-to-date antivirus is therefore crucial for ensuring internet security in your home. Good antivirus software will safeguard your devices from virus, malware, and ransomware, and those with antispyware detect and prevent unwanted spyware installations in your device and remove them if already installed.

Ensuring your software version is up-to-date is important, but we cannot forget that the software features must also keep up with your needs. As shopping and banking online becomes a big part of your lifestyle, it is essential to have banking and payment protection to keep all your online transactions secure. Choose an antivirus software that provides a secure browser that automatically protects you while internet banking and accessing web-based crypto-wallets. To understand which software suits your needs, compare the different ESET products.

Educate your family

It’s easy to get complacent about cybersecurity at home, but with the growing number of cyber threats in Singapore, the topic cannot be ignored. Take the time to educate your family about the kinds of threats they face and how they can protect themselves.

Scammers use emails, social networks, gaming sites, video streaming sites and more to install malware in your device when you unknowingly visit a compromised website. Your family might be unaware of the possible online threats while downloading content or software from the internet, or using their email.

Security software automatically detects any malware while downloading a file, or opening an email attachment or URL, thus preventing your internet security from being compromised. That alone, however, isn’t enough. With scams becoming increasingly sophisticated, everyone needs to easily recognise malware and phishing.

Opt for fuss-free protection

Nobody likes too many interruptions while using their device. The ideal antivirus software should offer non-disruptive, yet advanced protection (that means no annoying pop-ups).

Look for one that works quietly in the background and allows you to focus on your activities, such as gaming, where it’s important to eliminate any distractions that could affect your experience.

Secure your router

Your internet router plays a vital role in ensuring the best internet security for your home. While having the best internet security software is important, investing in the right router is equally important.

After buying and installing a new router, a common mistake people make is retaining the default router settings. It’s best to secure your router by changing both the password used to connect to the router and the password used to access its settings. Learn how to configure your router securely here.

Lastly, don’t forget to keep your router’s firmware updated with the latest security updates. To do so, sign up to your router manufacturer’s alert list to get timely reminders as soon as the latest updates are available. To get the best internet security, it’s wise to spend a bit more to get a router from a reputable brand that provides updates for the next 2-3 years, instead of buying a low-priced router that leaves you vulnerable in the future.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About ESET
For 30 years, ESET® has been developing industry-leading IT security software and services for businesses and consumers worldwide. With solutions ranging from endpoint security to encryption and two-factor authentication, ESET’s high-performing, easy-to-use products give individuals and businesses the peace of mind to enjoy the full potential of their technology. ESET unobtrusively protects and monitors 24/7, updating defenses in real time to keep users safe and businesses running without interruption. Evolving threats require an evolving IT security company. Backed by R&D facilities worldwide, ESET became the first IT security company to earn 100 Virus Bulletin VB100 awards, identifying every single “in-the-wild” malware without interruption since 2003.

ESET has joined the Diversity Charter of the Slovak Republic

Bratislava – ESET, a global leader in cybersecurity, has joined fifty other signatory companies operating in the Slovak Republic in signing the Diversity Charter of the Slovak Republic. In a first, the signing ceremony took place online. The Diversity Charter is a voluntary initiative by companies and organizations to promote diversity in the workplace. It is supported by the European Commission via the EU Platform of Diversity Charters, which supports the dissemination and sharing of principles, good practice and experience on diversity management in EU countries.

“For ESET, as a technology company, a central tenet of diversity and CSR activities is strengthening the representation of women and girls in IT, not only for the company itself, but for the entire sector as a whole. By signing the Diversity Charter of the Slovak Republic, we want to demonstrate that ESET takes inclusion and diversity seriously and that it is a matter of principle for us,” said Lucia Marková, ESET’s CSR Manager, at the signing of the Diversity Charter.

Membership in this initiative is open to all companies and organizations that are aware of the importance of equal treatment, inclusion and diversity in the workplace. The signatories agree with the content of the Diversity Charter of the Slovak Republic and subscribe to the following principles:

  • Voluntarily integrate into the life of the company a set of principles and procedures that take into account diversity and an inclusive approach in the workplace.
  • Build a relationship toward employees based on these principles and raise awareness of diversity issues at the management level.
  • Inspire other companies operating in Slovakia and spread awareness of the benefits arising from the implementation of a policy of diversity.

“We work hard at creating a respectful environment in which all our employees feel welcome, without distinction. We promote diversity in the workplace very naturally; on our part, we mainly focus on a receptive and individual approach, not on statistics. We also pay serious attention to the approach we’ve taken to promote mental health at work, a very current topic that underlies the success of any and all employees,” concludes Daniela Škripková, Chief HR Officer at ESET.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About ESET
For 30 years, ESET® has been developing industry-leading IT security software and services for businesses and consumers worldwide. With solutions ranging from endpoint security to encryption and two-factor authentication, ESET’s high-performing, easy-to-use products give individuals and businesses the peace of mind to enjoy the full potential of their technology. ESET unobtrusively protects and monitors 24/7, updating defenses in real time to keep users safe and businesses running without interruption. Evolving threats require an evolving IT security company. Backed by R&D facilities worldwide, ESET became the first IT security company to earn 100 Virus Bulletin VB100 awards, identifying every single “in-the-wild” malware without interruption since 2003.

Google Chrome and ESET collaborate in fight against online threats

BRATISLAVA – ESET, a global leader in cybersecurity, announced today it is continuing to partner with Google to protect Google Chrome users. ESET’s award-winning technology is used by Google to scan, identify and remove unwanted software encountered by users of Chrome for Windows. The extension of the cooperation on Chrome Cleanup, part of Chrome’s Safe Browsing feature, continues the close collaboration between the world’s most popular browser and the leading EU-based IT security vendor’s technology.

As applied in Chrome Cleanup, ESET’s technology is used by Google to alert users about unwanted or potentially harmful software attempting to get on users’ devices through stealth, for example, by being bundled into the download of legitimate software or content. Google Chrome, using ESET’s security technology, then provides users with the option to remove the unwanted software. Chrome Cleanup operates in the background, without visibility or interruptions to the user. It deletes the unwanted software and notifies the user once the cleanup has been successfully completed.

The two companies enjoy a broad relationship that also includes a collaborative role in which ESET works closely with Google to ensure the safety of the Google Play Store as a partner in the App Defense Alliance. ESET also provides data for users of Chronicle, Google Cloud’s security analytics platform, to surface verdicts on malicious files.

“We are proud to partner with Google in helping Chrome users enjoy safer technology,” said Juraj Malcho, ESET Chief Technology Officer. “The ongoing collaboration with Google and Chrome Cleanup demonstrates the importance that both companies place on keeping users safe and secure. With Chrome being the browser of choice for most Windows users, ESET’s technology and engineers are providing frontline protection.”

For additional information about Google Chrome Cleanup, please click here

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About ESET
For 30 years, ESET® has been developing industry-leading IT security software and services for businesses and consumers worldwide. With solutions ranging from endpoint security to encryption and two-factor authentication, ESET’s high-performing, easy-to-use products give individuals and businesses the peace of mind to enjoy the full potential of their technology. ESET unobtrusively protects and monitors 24/7, updating defenses in real time to keep users safe and businesses running without interruption. Evolving threats require an evolving IT security company. Backed by R&D facilities worldwide, ESET became the first IT security company to earn 100 Virus Bulletin VB100 awards, identifying every single “in-the-wild” malware without interruption since 2003.

訊連科技發表全新FaceMe® eKYC & Fintech智慧金融解決方案 打造安全、快速、可靠且流暢的金融eKYC應用

【2020年12月8日,台北訊】 全球頂尖AI臉部辨識領導廠商訊連科技(5203.TW)發表新版FaceMe® eKYC & Fintech智慧金融解決方案,透過臉部辨識eKYC,即可進行人證比對、身分辨識等應用,提升各式服務申辦的效率與安全。訊連科技亦將於12月24日舉辦 「FaceMe® eKYC & Fintech 掌握智慧金融刷臉先機」線上研討會,分享金融科技最新趨勢與eKYC等重點應用項目。

訊連科技發表全新FaceMe® eKYC & Fintech智慧金融解決方案 打造安全、快速、可靠且流暢的金融eKYC應用

金融科技(Fintech)是近年來金融業數位轉型的一大趨勢,而透過臉部辨識進行的eKYC ( Electronic Know Your Customer)更是金融科技的重點應用項目,臉部辨識與其他生物辨識技術相比,其易用、辨識率高與快速之優勢,可相容於行動裝置及電腦上的攝影機,無須另外搭配指紋掃描、虹膜掃描等專屬硬體。

FaceMe®是全球頂尖的臉部辨識引擎,於全球知名的NIST FRVT臉部辨識1:1及1:N評比中,名列全球頂尖開發團隊體之列。透過FaceMe®高精準度的臉部辨識技術,可為智慧金融提供高達99.7%的辨識率,除了可準確進行人證比對及身分辨識外,亦可提供有效的防偽技術,杜絕透過臉部相片、影片或3D模型等方式攻擊系統,避免有心人士透過相片或臉部影片進行破解及身分盜用。

「金融科技是金融產業數位化轉型的第一步,這項技術節省大量時間和成本,並提高金融機構的服務水準。其中採用生物辨識的eKYC應用,可大幅提升金融認證之易用性。」訊連科技黃肇雄執行長表示:「在新冠疫情影響下,臉部辨識擁有非接觸性的優勢,為最適合金融機構導入之生物辨識技術。FaceMe® eKYC & Fintech智慧金融解決方案不僅提供高達99.7%的辨識率,更支援高精準度2D/3D臉部防偽,解決以往民眾須經常往來臨櫃辦理冗長程序的困擾,使金融服務更加安全、簡單、快速。」

全新升級的FaceMe® eKYC & Fintech 智慧金融解決方案 ,同時提供1:1 人員核身 (人證比對)與1:N 身分辨識等功能,可應用於行動網銀、ATM無卡交易、行動投保與人員進出管理等,透過臉部辨識可更快速、安全的核實用戶身分,同時將臉部特徵存放至伺服器建檔,供作後續服務使用,不僅大幅提升了客戶體驗,也減少了金融業大量尋求客服協助的問題。

訊連科技將於12月24日舉辦 「FaceMe® eKYC & Fintech 掌握智慧金融刷臉先機」線上研討會,分享金融科技最新趨勢與eKYC等重點應用項目,讓台灣客戶可即時掌握金融科技的脈動。

「FaceMe® eKYC & Fintech 掌握智慧金融刷臉先機」線上研討會

更多關於FaceMe® eKYC & Fintech的訊息,請至: https://tw.cyberlink.com/faceme/solution/Fintech_eKYC

About Version 2

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products. Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

關於CyberLink
訊連科技創立於1996年,擁有頂尖視訊與音訊技術的影音軟體公司,專精於數位影音軟體及多媒體串流應用解決方案產品研發,並以「抓準技術板塊,擴大全球行銷布局」的策略,深根台灣、佈局全球,展現亮麗的成績。訊連科技以先進的技術提供完美的高解析影音播放效果、以尖端的科技提供完整的高解析度擷取、編輯、製片及燒錄功能且完整支援各種高解析度影片及音訊格式。產品包括:「威力導演」、「PowerDVD」、「威力製片」、「威力酷燒」等。