DigiCert

Attackers compromised DigiCert's internal support systems via a social engineering attack, gaining access to initialization codes for pending EV code-signing certificates. They fraudulently obtained valid certificates and used them to sign Zhong Stealer malware. DigiCert revoked 60 certificates, 27 directly linked to the attacker.