Fake certificates and phishing

We’ve seen this before, and it’s back:  Demands to install a new “certificate” from a site.

What’s downloaded is a malicious trojan, with very poor AV detection.

Alex Eckelberry