Daycrew

[Daycrew @Daycrew8]

@CyberTotal2026

[Daycrew @Daycrew8]

@leadlagreport Can't fix stupid!

[Daycrew @Daycrew8]

@IvarVikg AI

[International Cyber Digest @IntCyberDigest]

‼️🚨 One of the world's largest Certificate Authorities, DigiCert, was compromised by a malicious screensaver file sent through a customer support chat. Their antivirus blocked the malware four times. The agent kept clicking. The fifth try got through.

27 code signing certificates were stolen and used to sign malware.

DigiCert ultimately revoked 60 certificates.

Per DigiCert's incident report, filed in Mozilla's CA compliance tracker as Bug 2033170, here is how it unfolded:

April 2: an attacker contacted a DigiCert helpdesk agent through the company's customer support chat channel, posing as a customer. The lure was a zip file pitched as a screenshot. Inside the zip was a .scr file. On Windows, .scr files are executables, and this one carried a malicious payload.

Opening a file a customer sent through the official support channel is what an agent is supposed to do. Support staff are the one role designed to accept files from strangers.

DigiCert's endpoint security blocked four infection attempts. On the fifth, the support analyst's machine was infected.

DigiCert detected the infection, ran an investigation, and concluded the incident was contained.

Eleven days later, an external researcher tipped DigiCert off about misuse of DigiCert-issued code signing certificates in the wild. That tip led to the discovery of a second compromised machine, belonging to a different support analyst, infected through the same vector. The EDR on that machine had not been functioning correctly, so the original investigation missed it.

The second machine gave the attacker access to DigiCert's internal support portal. That portal lets support staff reach limited views of customer accounts, including initialization codes for ordered but not-yet-issued code signing certificates. Combining a stolen initialization code with an approved order let the attacker pull a real, validly issued code signing certificate. They did this 27 times.

DigiCert's own list of what went wrong:

- File-type filtering on the customer support chat channel did not catch the .scr
- EDR coverage was inconsistent and incomplete, creating a blind spot
- Initialization codes for code signing certificates were not adequately protected

DigiCert says it got lucky. An outside researcher found the malware abuse before DigiCert did. Without that tip, the second machine and the active certificate theft might still be running today.

[Daycrew @Daycrew8]

@Coreandor @DeItaone What a smart question there? Accept? The underdog wants control of the Port.

[Daycrew @Daycrew8]

@zero252915 @w_terrence Don't watch, why watch this piece of low life so he makes money from your click.

[Daycrew @Daycrew8]

@kangminlee Teach this jobless fker a lesson. Influence his ass in jail.

[Daycrew @Daycrew8]

@MAGAVoice Can't trust China

[Daycrew @Daycrew8]

@zundamotisuki All lefties are a sick cancer people world wide. They all have the same cancer mindset. Lunatic and nuts.

[Daycrew @Daycrew8]

@_Tumbawumba @MarioNawfal This is the only way to get rid of this Regime. China's style. https://t.co/gROdDvOnNe

[Daycrew @Daycrew8]

@RNCResearch He is crooked too. If you dig it up you will see his name under some scandals.

[Daycrew @Daycrew8]

@kenobi__ken Keep up on the fighting for Japan's people! Muslim dont' belong to any countries except their own. Stand up or else Japan will be like EU and US. They can't survive with Xi's or Un's so Fight for your life Japan!

[Daycrew @Daycrew8]

@KimKatieUSA 3rd world country vs Japan.

[Daycrew @Daycrew8]

@RepJeffries You worship Demons so shut the f off! Repent!

[Daycrew @Daycrew8]

@ericswalwell Your time is up!

[Daycrew @Daycrew8]

@GuntherEagleman This hole? Word salad should be long in jail. Don't bring this kind of garbage in your post.

[Daycrew @Daycrew8]

@AndrewBolis Money

[Daycrew @Daycrew8]

@KimDotcom

[Daycrew @Daycrew8]

@NguyenThih36 Throw all these mofo into the ocean to feed the fish.