Seedworm Malware Signed with 'Amy Cherne' Certificate
Detects files signed with a code-signing certificate issued to 'Amy Cherne'. This certificate was observed being used by the Iranian APT group Seedworm (aka MuddyWater) to sign new backdoors named Dindoor and Fakeset.
Sigma
