Microsoft Admits to Certifying Driver Containing Toolkit Malware

When it comes to new drivers, Microsoft must test them and give them the necessary digital certificate that allows them to be installed by default. However, it seems something sinister slipped through the cracks this time.

A driver called Netfilter that redirects traffic to a Chinese IP and installs a root certificate to the registry made it through Microsoft’s testing parameters without being detected as malware.

The malware was first discovered by Karsten Hahn, a malware analyst at G Data, and then subsequently flagged off to Microsoft. Hahn also said that G Data had detected this malware as a false positive last week, but it turned out to be true.

According to Microsoft’s security response team, the malware’s activity is “limited to the gaming sector specifically in China.”

Detailing the malware’s purpose, Microsoft said that the actor’s goal is to use the driver to spoof their geo-location to cheat the system and play from anywhere. This enables them to gain an advantage in games and possibly exploit other players by compromising their accounts through common tools like keyloggers.

It is still unclear how exactly this malware was able to overcome Microsoft’s defenses. The company says that the actor submitted drivers for certification through the Windows Hardware Compatibility Program and that the drivers were built by a third party.

The account that made the driver has been suspended, and its previous submissions are under investigation for more malware.

At the moment, Windows users are advised that “There are no actions customers should take other than follow security best practices and deploy Antivirus software such as Windows Defender for Endpoint.”

About Microsoft

Founded by Bill Gates and Paul Allen in 1975, Microsoft is an American MNC that creates, licenses, supports and sells computers, software, electronics, video games, and corresponding services.

Some of the most popular titles in the world, like Age of Empires, Forza, Gears of War, Halo, Minecraft, Microsoft Solitaire, Microsoft Flight Simulator, and State of Decay, have been developed and published by Microsoft.

Microsoft is also known for establishing the famous console brand Xbox, along with the video game subscription Xbox Game Pass.