The surveillance tool was signed with legitimate Apple developer certificates.
Source: Threadpost