Untrusted certificate masquerading as well-known vendor (Dolphin X Fake Code Signature)

Duo Tech@duotech

•updated Jul 27, 2026•5•0•7

Detects executables with digital signatures that fail trust validation while claiming to be from well-known vendors, consistent with Dolphin X's 'Fake Code Signature' mechanism. This technique attempts to evade defenses by masquerading as a trusted application.