[zazagura]

You can repackage the real driver together with your own (signed by you) trojan in a new (signed by you) installer.

How many users do you think check which entity signed an executable?