Signing malicious code with valid digital certificates is a helpful trick used by attackers to maximize the odds that malware won’t be flagged by antivirus solutions and often even by network security appliances. Digitally signed malware can also bypass OS protection mechanisms that install or launch only programs with valid signatures.

Read full news article on Help Net Security