Code-signing certificate abuse in the Black Basta chat leaks (and how to fight back)

Author(s): AARON WALTON
Organization: Expel

Open article directly Open article on Archive.org

2026-04-22 ⋅ Expel ⋅ Marcus Hutchins
Inside Lazarus: How North Korea uses AI to industrialize attacks on developers
BeaverTail OtterCookie InvisibleFerret HexagonalRodent

2026-01-15 ⋅ Expel ⋅ AARON WALTON
Planned failure: Gootloader’s malformed ZIP actually works perfectly
GootLoader

2025-10-31 ⋅ Expel ⋅ AARON WALTON
Certified OysterLoader: Tracking Rhysida ransomware gang activity via code-signing certificates
Broomstick

Propose Change Code-signing certificate abuse in the Black Basta chat leaks (and how to fight back)