Threat actors used drivers signed by Microsoft hardware developer profiles for launching ransomware attacks. On October 19, this year, cyber researchers notified Microsoft that drivers certified by their program were maliciously used by threat actors.

Read full article on Heimdal Security Blog