Code-signing abuse | Mingming Zhanghttps://zhangmm.net/category/code-signing-abuse/Code-signing abuseWowchemy (https://wowchemy.com)en-usCopyright © Blog of Mingming 2026Thu, 01 Jan 2026 00:00:00 +0000https://zhangmm.net/media/avatar.jpgCode-signing abusehttps://zhangmm.net/category/code-signing-abuse/Understanding the Status and Strategies of the Code Signing Abuse Ecosystemhttps://zhangmm.net/publication/ndss26-codesign/Thu, 01 Jan 2026 00:00:00 +0000https://zhangmm.net/publication/ndss26-codesign/<h3 id="overview">Overview</h3> <p>This paper conducts a large-scale measurement of code-signing abuse using over 3.2 million signed malware samples, revealing the global prevalence, evolving attacker strategies, revocation weaknesses, and real-world use of certificate polymorphism to evade detection and revocation.</p>