Spymel Trojan Taps Digital Certificates to Avoid Detection
"Yet another malware family—Trojan Spymel—has been found to be using compromised digital certificates to evade detection.
According to analysis from Zscaler’s ThreatLabZ, Spymel infects the targeted system through spammed email, leveraging social engineering. It spies on all user activity on the compromised machine and relays it to the attacker."