AFAICT, CERT-Bund (the German CERT) believes what Shadowserver tells them. When CERT-Bund makes a request onward ,it looks more official, but I don't believe an

AFAICT, CERT-Bund (the German CERT) believes what Shadowserver tells them. When CERT-Bund makes a request onward ,it looks more official, but I don't believe any more actual vetting happens.