2025-09-08 Journal

Subverting code integrity checks to locally backdoor Signal, 1Password, Slack, and more

• Source: vulnerability.circl.lu
• Time: 10:31:27
• Summary: # Subverting code integrity checks to locally backdoor Signal, 1Password, Slack, and more -The Trail of Bits Blog On my first project shadow at Trail of Bits, I investigated a variety of popular Electron-based applications for code integrity checking bypasses. **I discovered a way to backdoor Signal, 1Password (patched in v8.11.8-40), Slack, and Chrome by tampering with executable content outside…

---