Ludashi Adware Operator Rotates to Third DigiCert Certificate Across Three Chinese Entities

A follow-up snapshot of the Ludashi/LuDaShi adware campaign reveals a third DigiCert G4 code-signing certificate issued to a third distinct Chinese legal entity, completing a documented pattern of deliberate identity rotation. The campaign's C2 pool has simultaneously expanded to 14 IP addresses across six Chinese ISP autonomous systems, all unified by a single Sectigo DV wildcard certificate whose Subject Alternative Names include major Chinese consumer brands.