to "You're not cool enough for some malware" referring RSA ---- Critical Comment....
"Whitelisting by Black Hats" has been observed since September 2007. References have been published .
Please refer to http://www.heise.de/security/news/foren/S-Ich-versuche-es-zu-erkaleren-soweit-ich-es-verstanden-habe/forum-128326/msg-14007655/read/?zanpid=1728371198125224961 and following posts.
I explained it again in topic 1 of http://websicherheit.wordpress.com/2011/08/06/einbruch-bei-rsa-offenbar-aus-china/...
It must be taken for sure, that this kind of camouflage has been applied since more than five years.
<sarcasm> RSA should remember the mails they received ... </sarcasm>
HA