Software code signing certificates are in high demand on the Dark Web, outpricing stolen credit card data, fake passports, and even guns. Threat actors could abuse these valid, but stolen, certificates to install malware on victim PCs without triggering any bells and whistles. With bids as high as $1,200 for a single certificate, researchers believe this trend could undermine the entire authentication system the internet is based on. Besides using these certificates to plant malware, they could be used to perform man-in-the-middle attacks and impersonate legitimate websites.”]