Kaspersky Lab spotted code-signed Trojan malware dubbed Mediyes that had been signed with a digital certificate. The private encryption key associated with Conpavi AG certificate had been stolen. Symantec has revoked the certificate that was used to digitally sign the malware. The incident points out the risks associated with this type of digital certificate and the need to safeguard them. The advantage in code-signing for them is it gives them a boost up in having the malicious code evade detection by antivirus.”]