Beware the Blister

AgitatedRiot

Beware of the new malware Blister.

Blister infiltrates Windows systems by using valid code-signing certificates to allow files to run like they are genuine executable files. The detection rate is very low.

Richard Haseltine

So how can it be spotted? Usually even if a thing has a valid certificate, as long as the user hasn't selected always trust there will be a prompt - is this circumventing the prompt entirely?  Are theer any other countermeasures or warnign signs - it's difficult to be beware without any clues.

AgitatedRiot

Best if people read about it.

Stealthy BLISTER Malware Strain Detected on Windows Systems (bitdefender.co.uk)

Edit Most of the time stuff like this gets installed by the operator of the machine by being tricked by an email and Porn

WendyLuvsCatz

I don't suppose sticking a sterilised pin in it to drain the serum helps?

AgitatedRiot

Hylas

Technobabble aside, what does one actually have to do about this?

AgitatedRiot

Since they have located this they will be working on a fix. Like I have said before it's the person at the controls who have the problems. Just practice safe browsing and don't click any unknown emails like my wife has a habit of doing. Her machine is like my honey pot and sandbox in one. My machines are on another network. Behind a couple of firewalls. I watch sometimes as you see them banging on the walls.

AgitatedRiot

You can see if your machine is infected by checking your certificates.