Want to get around app whitelists by pretending to be Microsoft? Of course you can…

…And here’s how DerbyCon  A sprinkle of code and an understanding of the Windows digital certificate process is all that’s needed for a miscreant to sneak malware past Microsoft’s application whitelist within a corporate environment.… The Register – Security Secure Hunter Anti -Malware