Chinese APT group Bronze Starlight uses stolen Ivacy VPN certificate to sign malware for the Southeast Asian gambling sector. Stolen certificate makes malware appear legitimate, bypassing security and blending in with regular software.

Source: HackRead