Yara Rule - ADEDESK의 잠재적으로 손상된 서명 인증서 (Philandro Software Gmbh, 0DBF152DEAP0B981A8A938D53F769DB8)로 서명 된 이진을 감지 관련 IOC 4개 발견
Yara 정의.
Neo23x0
Yara Rule - Detects binaries signed with a potentially compromised signing certificate of AnyDesk (philandro Software GmbH, 0DBF152DEAF0B981A8A938D53F769DB8)
Yara definition.
https://github.com/Neo23x0/signature-base/commit/9e09258910c57e1134193f0a0f515b5eec872b01