Hackers use digital certificates to spread malware