Skip to content
Threat Feed

Actor

Fox Tempest

2 briefs RSS
high threat

Fox Tempest Malware-Signing-as-a-Service Disrupted

Microsoft disrupted a malware-signing-as-a-service (MSaaS) operation run by Fox Tempest that abused the Azure Artifact Signing service to generate fraudulent code-signing certificates, enabling malware to bypass security controls.

Azure Artifact Signing +4 Fox Tempest code-signing malware-signing supply-chain azure
2r 2t 1i
high threat

Fox Tempest Malware-Signing-as-a-Service Disrupted by Microsoft

Microsoft disrupted Fox Tempest, a threat actor running a malware-signing-as-a-service (MSaaS) that abuses Microsoft Artifact Signing to generate short-lived code-signing certificates used to sign malware disguised as legitimate software, delivering ransomware and various information stealers to victims across multiple sectors.

Microsoft Artifact Signing +1 Fox Tempest malware-signing azure defense-evasion ransomware
2r 2t