■■■■□ Iranian State Sponsored Hackers Use SSL.com Certificates to Sign Malware.
Security researchers say multiple threat groups, including Iran’s Charming Kitten APT offshoot Subtle Snail, are deploying malware with code-signing certificates from the Houston-based company.
https://www.darkreading.com/vulnerabilities-threats/iranian-hackers-ssl-certificates-sign-malware