Re:SolarWinds hackers were able to access Microsoft source code
by NickGerleman on Friday January 01, 2021 @05:44AM
(#25602297)
Code signing makes that pretty tricky. System DLLs will have integrity checks against msft certs.
[ Parent
| on HN ]
Re:SolarWinds hackers were able to access Microsoft source code
by SCHiM on Friday January 01, 2021 @11:46AM
(#25604488)
Not all of them. msimg32.dll has no certificate and many system processes attempt to load that. There are more dlls in system32 if you look. Neither does Wldap32.dll, which gets loaded into lsass and is part of the knowndlls...