You see, thats where Code Signing certificate standards let us down

Until I initiated the
CAB Forum in 2005 May there were no standards for SSL certificates either, where anyone could obtain SSL certificates which were used for getting end users to trust a site. Now that has changed and we have a new standard in place called EV SSL standard and we all have a new standard for who can obtain these certificates. Until
EV SSL Certificate there was NO standard about who could have obtained
SSL Certificate. Now Comodo initiated a sub-committe within CAB Forum to set new standards for Code Signing to create more stringent validation rules for obtaining
Code Signing Certificates. CABForum has been an amazing platform to help create new standards in validation for the industry so that end users could be protected! Next task of identifying new standards for Code Signing Certificates are well underway and we hope we can have a new standard pretty soon.
In the meanwhile, we are fighting perpetrators by reacting speedily and revoking their certificates. Soon with the new standards the bar will be raised for fraudsters!
thanks
Melih