Impostor certificate:
EV Code-signing certificate "Yurisk LLC", used to sign fake NordPass installer.

Abused and revoked within 1 week of issuance. Company registration says they transport freight.

https://bazaar.abuse.ch/browse/tag/Yurisk%20LLC/

MalwareBazaar | Yurisk LLC

Malware samples associated with tag Yurisk LLC