AhnLab ASEC blog (asec.ahnlab.com)
Warning for Certification Solution (VestCert) Vulnerability and Update Recommendation · 2023-03-17
excerpt: Vulnerable Software and Overview VestCert is a certification program used while accessing websites, and is a non-ActiveX module developed by the Korean company, Yettiesoft. This program is registered as a Startup Program and will be relaunched by Yettiesoft’s service (Gozi) even if it is terminated. It remains constantly active as a process once it is installed, […] | attribution sentence: Patch Target and Versions VestCert versions 2.3.6 – 2.5.29 Vulnerability Exploitation Log (Lazarus) AhnLab’s ASD (AhnLab Smart Defense) infrastructure confirmed the exploitation of this vulnerability. | target sentence: Patch Target and Versions VestCert versions 2.3.6 – 2.5.29 Vulnerability Exploitation Log (Lazarus) AhnLab’s ASD (AhnLab Smart Defense) infrastructure confirmed the exploitation of this vulnerability.