Because your OS now considers the R2R certificate trusted, any malicious actor who gains access to the R2R private key can sign malware with it. If that malware lands on your PC, Windows Defender and SmartScreen may bypass it entirely, allowing a catastrophic malware or ransomware infection to execute without warning. 2. Man-in-the-Middle (MitM) Attacks
– Using a tool like certmgr.exe or MakeCert to generate a self-signed root and add it to Trusted Root Certification Authorities . This requires admin rights. Once done, any future malware signed with that key bypasses signature checks. team r2r root certificate win