From https://www.secureworks.com/blog/law-enforcement-takes-down-qakbot https://www.secureworks.com/blog/law-enforcement-takes-down-... "To interact with infec

From https://www.secureworks.com/blog/law-enforcement-takes-down-qakbot https://www.secureworks.com/blog/law-enforcement-takes-down-... "To interact with infected hosts, the replacement servers required a certificate that can sign messages. It appears that the certificates were obtained and used for good intentions."