The Cyber Stream: Threat Actor Abuses Microsoft’s WHCP to Sign Malicious Drivers

Monday, 28 June 2021

Threat Actor Abuses Microsoft’s WHCP to Sign Malicious Drivers

Microsoft is investigating an incident where a threat actor submitted malicious drivers for certification through the Windows Hardware Compatibility Program.

Built by a third-party, the drivers were designed to target gaming environments and could allow the attacker to spoof their location and play from anywhere.