133 Windows drivers with valid Microsoft signatures found crawling with malware

“Malware is found in over 100 drivers for Windows, despite valid signatures. Microsoft reacts and suspends the licences of many developers.

Microsoft has apparently been familiar with the problem for a while and reacted as part of the most recent monthly Windows update. The 133 affected drivers were blocked and the accounts of the respective developers were locked.

To detect potentially malicious drivers that may have been installed before March 2, 2023, an offline scan of the system is also recommended. The bad drivers are now automatically collected in a revocation list integrated in Windows, including numerous drivers with certificates from China.”