Stealthy malware infects digitally-signed files without altering hashes

Grinding research finds gold in failed header checks

Black Hat Deep Instinct researcher Tom Nipravsky has undermined the ubiquitous security technique of digitally-signed files by baking malicious code into headers without tripping popular security tools."