I don't have any inside details on this case, but I highly suspect the signing certificate was stolen from a legitimate user. Organizations sophisticated enoug

I don't have any inside details on this case, but I highly suspect the signing certificate was stolen from a legitimate user. Organizations sophisticated enough to build something like this already target organizations like device manufactures to get kernel driver signing certificates on Windows.