Want to get around app whitelists by pretending to be Microsoft? Of course you can...
...And here's how DerbyCon A sprinkle of code and an understanding of the Windows digital certificate process is all that's needed for a miscreant to sneak malware past Microsoft's application whitelist within a corporate environment."