A fake company bought a valid EV certificate, signed malware, and helped criminals keep remote access to enterprise PCs.