Certum

Reported Context (2)

Signed by a brand-new certificate: an individual’s Certum code-signing certificate, issued five days before the loader was built. Fake Disk Manager Installer Deploys RdViewer as a SYSTEM-Level Backdoor
The disguise: Microsoft name, description and version number, plus a real Certum code-signing certificate issued to Zhengzhou Xiaoye Network Co., Ltd. Signed Windows Security Health Service Impersonator Is a Gh0st RAT-Lineage Backdoor

Malware (3)

People (1)

MITRE ATT&CK (14)

Vendors (1)

Products (2)

Tools (11)

Countries (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.