Kaspersky Lab says a sample from the Destover family of malware used to attack Sony Pictures was signed by a stolen Sony certificate. The sample was signed around the time the Sony Pictures breach leaked more than 11,000 files related to IT operations. A security researcher found the certificate in the leaked documents and discovered that its password was the password. The newly signed sample was then uploaded to Virus Total, where Kaspersy later discovered it. The certificate was used to sign a variant of Destover malware.”]