IBM Security X-Force researchers have tracked a phenomenon known as the CaaS (Certificates as a service) Cybercriminals would use the Dark Web for selling high-grade code certificates – which they have obtained from trusted certificate authorities- to anyone that is interested in purchasing them. Sales of code signing certificates have increased considerably over the past few months, according to the researchers. Users would receive alerts in an attempt to install files that are not accompanied with a valid certificate. Check the validity of the certificates and verify additional attributes like the certificates hash sum.”]
Source: https://securityaffairs.co/wordpress/40866/cyber-crime/code-signing-certificates.html