Comodo Hacker posts fraudulent Mozilla SSL certificate online

The self-styled 'Comodo Hacker' has revealed more information about the SSL certificate attack which emerged last week, and uploaded one of the certificates in question in an attempt to convince doubters that they carried out the original hack.

The theft of the nine SSL certficates actually occurred on 15 March but came to light last week when certificate authority Comodo revealed in a blog post that hackers had broken into an affiliate and requested nine SSL certficates for fake sites.

At least one of them was issued by Comodo before the attack was detected and terminated.

Although Comodo publicly argued that it suspected Iranian government involvement in the attack, a lone Iranian hacker calling themselves 'Comodo Hacker' then claimed responsibility.

Now the same hacker has posted the Mozilla add-on certificate and private key to the web, along with a scathing attack on those who still don't believe that the individual was solely responsible for the attack.

The hacker revealed that they had been studying encryption algorithms for six years, and claimed to be programming for AVR and ARM processors.

The Comodo Hacker also revealed that they installed a keylogger on the server of Comodo reseller InstantSSL.it in order to monitor administrator behaviour.