Skip to content
Threat Feed
Subscribe

Product

Code Signing Certificates (Issued by Verokey)

1 brief RSS
high threat

GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft

CylindricalCanine, a subgroup of GoldenEyeDog, breached DigiCert in April 2026 by delivering a malicious executable via a customer chat channel, leading to the theft of code-signing certificates which were then used to sign Golden Gh0st RAT malware for distribution, primarily targeting finance organizations and the gambling and gaming sectors.

Code Signing Certificates +2 GoldenEyeDog code-signing-certificate-theft supply-chain-attack malware rat digicert golden-gh0st-rat apt-q-27 phishing +1
2r 10t