“It’s not that common to find a signed copy of malware. It’s even rarer that it’s signed with an official key belonging to a government.”