https://securelist.com/ransomware-and-wiper-signed-with-stolen-certificates/108350/