DigiCert Hacked in Screensaver

Gbhackers •Divya • May 5, 2026

DigiCert, a major Certificate Authority, recently suffered a significant security breach where hackers used a malicious screensaver file to steal 60 Extended Validation (EV) Code Signing certificates. These highly trusted certificates were subsequently used to sign the “Zhong Stealer” malware, allowing the malicious files to bypass security warnings by appearing as legitimate software. The incident […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

DigiCert Hacked via Malicious Screensaver File, EV Certificates Stolen In April 2026, DigiCert experienced a breach due to a social engineering attack that compromised its tech support team. An attacker tricked two employees into executing a malicious screensaver file, leading to the theft of 27 code signing certificates. These certificates were subsequently used to sign malware, specifically the Zhong Stealer, linked to the GoldenEyeDog cybercrime group. The breach was discovered when a third-party security researcher reported the misuse of the certificates. DigiCert has since revoked the affected certificates and claims to have blocked further access. The incident highlights vulnerabilities in employee training and system configuration, particularly the misconfiguration of the CrowdStrike EDR agent. The attack's full impact is still being assessed, but it involved the unauthorized processing of 60 EV certificate orders. 6 sources 71

Extracted Entities

DigiCert Hacked in Screensaver

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Malware (1)

MITRE ATT&CK (1)