Hackers infect users of antivirus service that delivered updates over HTTP

Ars Technica

Center

High Factuality

Media Conglomerate: Advance Publications

Hackers infect users of antivirus service that delivered updates over HTTP

Enlarge (credit: Getty Images) Hackers abused an antivirus service for five years in order to infect end users with malware. The attack worked because the service delivered updates over HTTP, a protocol vulnerable to attacks that corrupt or tamper with data as it travels over the Internet. The unknown hackers, who may have ties to the North Korean government, pulled off this feat by performing a man-in-the-middle (MiitM) attack that replaced t…