COMpfun successor Reductor infects files on the fly to compromise TLS traffic
released on 2019-10-03 @ 11:36:35 AM
In April 2019, we discovered new malware that compromises encrypted web communications in an impressive way. Analysis of the malware allowed us to confirm that the operators have some control over the target’s network channel and could replace legitimate installers with infected ones on the fly. That places the actor in a very exclusive club, with capabilities that few other actors in the world have.