[wlug] Re: Trojanized versions of PuTTY utility being used to spread backdoor

On Fri, 16 Sep 2022 15:57:14 +1200, Peter Reutemann wrote:

-- source: https://arstechnica.com/information-technology/2022/09/trojanized-versions-o...

What do you know: Secure versions of [PuTTY] are signed by the official developer. The version sent in the WhatsApp message was not signed. Which would indicate that significant numbers of downloaders are not bothering to check signatures on the download. Does Microsoft make it easy to do this? Somehow I think not ...