More and more malware authors are switching to buying new, valid code signing certificates issued by Certificate Authorities instead of using stolen (compromised) ones, researchers have found. They do not go directly to the CAs for that, but go through one of the vendors of Authenticode certificates offering the wares on underground forums, marketplaces and websites trading black market goods.

Read full news article on Help Net Security