The identity of the hackers responsible remains elusive, though the phishing targets in China and the IP addresses involved indicate a coordinated effort, researchers from Anomali said.

This situation is a mess with many moving parts and unanswered questions.

The fraudulent files, which act like valid code signing certificates, allowed malware to go undetected by most anti-virus scans, Recorded Future says.

Symantec looks to be caving in its dispute with Chrome over the trustworthiness of digital certificates — which underlie the green padlock in the browser address bar…

Two of the biggest names on the internet embarked on a game of chicken this week over the little green padlock in the address bar.

Public Key Infrastructure, the system used to create, manage and store the mathematical keys and digital certificates used for encryption, is under stress in many companies and…