GoldenEyeDog Hackers Group Behind DigiCert Breach that Hijacks Code

Cybersecuritynews •Tushar Subhra Dutta • July 20, 2026

GoldenEyeDog, a Chinese cybercrime group linked to the Golden Gh0st malware family, is back in focus after an intrusion at DigiCert exposed the risks around code-signing certificates. The attackers used the access to intercept customer certificate activation codes and sign their own malicious files. The operation relied on a simple but effective route into a […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

GoldenEyeDog Hackers Exploit DigiCert Breach to Hijack Code-Signing Certificates The GoldenEyeDog hacking group, linked to the Golden Gh0st malware, has breached DigiCert, compromising code-signing certificates. This breach allowed attackers to intercept customer certificate activation codes and sign malicious files. The incident raises significant concerns regarding the security of code-signing processes and the potential for widespread exploitation. Affected systems include those relying on DigiCert for secure code-signing. The breach highlights vulnerabilities in certificate management and the risks posed by state-linked cybercrime. Current investigations are ongoing to assess the full scope of the breach and its implications for affected organizations. 3 sources 71

Extracted Entities

GoldenEyeDog Hackers Group Behind DigiCert Breach that Hijacks Code

The full story

Extracted Entities

Attack Types (2)

Companies (1)

Malware (1)