GoldenEyeDog Hackers Group Behind DigiCert Breach that Hijacks Code-Signing Certificates

GoldenEyeDog (CylindricalCanine) compromised a DigiCert support workstation via a malicious file submitted through the ticketing system, stole certificate activation codes for code-signing tokens, and used Golden Gh0st Loader/RAT (DLL sideloading, encrypted payloads, WebSocket C2) to sign and distribute malicious binaries; the report provides detailed TTPs and numerous IoCs including URLs, file hashes, domains/ports, and hardcoded keys.