Suspicious cert-sellers give badware a good name for just a few thousand bucks

Researchers unmask trade in code-signing certs

There's a flourishing trade in illicit code-signing certificates, and even extended validation certificates can be purchased for a few thousand dollars."