This code-signing issue represents a new attack vector, according to the researcher.
Source: Threadpost