Microsoft Certified A Driver That Carried Rootkit Malware, Connecting to Servers in China

A rootkit works only "post exploitation," according to Microsoft - users need to have obtained administrator-level access on a PC to install the driver.