Ask HN: How to report/revoke malicious Comodo code signing certificate?
Which serves 'adobe_flash_setup.exe' which is signed with COMODO Code Signing certificate of OOO "Finans Servis", proezd Serebryakova 6, 129323 Moscow, Russia. It's also found under different names, see http://www.herdprotect.com/adobe_flash_setup.exe-b6e4cc61a87f6633f5ef683be5525f9686475a4f.aspx .
I think this is at least they violate '1.6. Restrictions. Subscriber shall not: (i) impersonate or misrepresent Subscriber’s affiliation with any entity,' and also '3. Revocation. Comodo may revoke a Certificate if Comodo believes that: (xi) the Certificate was issued to publishers of malicious software; (xii) the Certificate may have been used to digitally sign hostile code, including spyware or other malicious software;' - https://www.comodo.com/repository/docs/code-signing-subscriber-agreement.pdf
But how to report such an issue? I cannot find any security related email address on the Comodo website.