[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fwk0DkOkFddBRvp2a9atn-H_YTtUBk7DEC9ZmXh4Y_eA":3},{"article":4,"iocs":49,"watch_terms":53},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":29,"category":30,"article_tags":33},"4a247e9a-c5f5-4360-855c-d3f463287874","And it was only 2 days ago when I told @SquiblydooBlog about a sample from this APT-Q-27 actors t...","and-it-was-only-2-days-ago-when-i-told-squiblydooblog-about-a-sample-from-this-a-4d2b87","And it was only 2 days ago when I told @SquiblydooBlog about a sample from this APT-Q-27 actors that also was signed using a @digicert given cert that was supposedly given to a Swiss company: \"Brunner Informatik AG is a small Swiss software company, founded in 1985. It develops https:\u002F\u002Ft.co\u002FGjHc3FacLc","A threat researcher discovered that APT-Q-27 actors have been using malware samples signed with legitimate DigiCert certificates issued to Brunner Informatik AG, a small Swiss software company founded in 1985. This indicates potential compromise of the company's code-signing credentials or misuse of legitimately issued certificates to evade detection. The discovery was made just days after the researcher had previously reported on related APT-Q-27 activity.","APT-Q-27 malware sample signed with DigiCert certificate issued to Swiss software company.",null,"https:\u002F\u002Fx.com\u002Fmalwrhunterteam\u002Fstatus\u002F2042906240901107988","https:\u002F\u002Fpbs.twimg.com\u002Fmedia\u002FHFnYzL6akAEKAoF.jpg","2026-04-11T10:02:57+00:00","2026-04-11T11:00:09.054979+00:00",7,[18,21,24,26],{"name":19,"type":20},"APT-Q-27","threat_actor",{"name":22,"type":23},"DigiCert","vendor",{"name":25,"type":23},"Brunner Informatik AG",{"name":27,"type":28},"Code Signing Certificates","technology","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":29,"icon":11,"name":31,"slug":32},"Threat Intelligence","threat-intelligence",[34,39,44],{"category":35},{"id":36,"icon":11,"name":37,"slug":38},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":40},{"id":41,"icon":11,"name":42,"slug":43},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":45},{"id":46,"icon":11,"name":47,"slug":48},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",[50],{"type":48,"value":51,"context":52},"APT-Q-27 malware samples","Samples signed with DigiCert certificates",[22,25]]