Trust Me, Bro: The Bro-Science of Windows Code Signing

Trust Me, Bro: The Bro-Science of Windows Code Signing by Fagan Afandiyev This talk breaks down how Windows code signing fails in real environments. You learn why signed binaries still bypass trust checks and why users click through warnings. The session walks through signature abuse, metadata cloning, and SIP hijacking with real examples and live demos. You see how attackers make malware appear trusted by the OS and by users. You also see how these techniques get chained together through a single tool using the TrustMeBro. Each step shows what changes on disk, in memory, and in the registry.