Code-signing certificate abuse in the Black Basta chat leaks (and how to fight back)

Black Basta chat leaks reveal the gang systematically purchases and uses impersonated EV code-signing certificates to sign a range of malware and delivery artifacts (documenting ~28 identified certificates and sample hashes), describing pricing, operational workflows, and advising defenders to investigate suspiciously signed files and report abused certificates to disrupt campaigns.