Key trusted Microsoft platform exploited to enable malware, experts warn

• Trusted Signing, a Microsoft certificate-signing service, is being abused by criminals, researchers are saying
• The criminals are signing malware with short-lived, three-day certificates
• Microsoft is actively monitoring for certificate abuse

Cybersecurity experts have warned Trusted Signing, Microsoft’s code-signing platform, is being abused to grant malware certificates and help it bypass endpoint protection and antivirus programs.

Certificates are digital credentials that verify the authenticity, integrity, and security of software. They use cryptographic keys to establish secure communications and prevent tampering or impersonation, and are considered crucial for encrypting sensitive data, ensuring secure transactions, and maintaining user trust. In software development, code-signing certificates validate that an application has not been altered after release.