Trojanized Adware Chain Hides Behind Bank's TLS Identity for 12 Months

Twenty Windows executables bearing a currently-valid DigiCert code-signing certificate issued to a Chinese entity have circulated as trojanized PC-utility components since May 2025. Simultaneously, seventeen Chinese ISP-assigned IPs present TLS certificates issued to a major payment-card network — infrastructure with no relationship to that institution — to mask backend traffic from network controls.