Cryptographic Certificates are the Biggest Nightmare

The report describes how Flame/related malware abused stolen Microsoft code-signing certificates and ClickOnce deployment to present malicious executables as legitimate Windows/Microsoft updates, bypass or spoof UAC warnings, and potentially enable silent installation when a certificate exists in a user's Trusted Publishers list; it highlights UI deception techniques (truncated hostnames, ClickOnce dialog text) and advises checking and removing unrecognized Trusted Publisher certificates.