bleepingcomputer.com·May 19, 2026
Microsoft has disrupted a malware-signing-as-a-service operation that exploited its Artifact Signing service to create fake code-signing certificates for use by ransomware gangs and cybercriminals.
The disruption of a malware-signing-as-a-service operation by Microsoft underscores the critical need for vigilance around code-signing services, which can be exploited to lend legitimacy to malicious software. As a professional in cybersecurity, ensure your threat intelligence strategies include monitoring for abuse of legitimate services like code-signing, as this can prevent ransomware and other cyber threats from bypassing security measures under the guise of trusted certificates.