A cyber-espionage group believed to be operating out of China has been using a digitally signed network filtering driver as part of recent attacks, Kaspersky Lab reports.
http://feedproxy.google.com/~r/Securityweek/~3/EBWgEXRezVk/china-linked-hackers-use-signed-network-filtering-driver-recent-attacks
