Produce a sentence which has a cefr level of "c1" and starts with: "this implies signing".
This implies signing their rootkit drivers with code signing certificates that chain up to a trusted root certification authority; finding a way to bypass UAC or tricking users into elevating a driver installer stub program; or finding a way to disable or bypass KPP, which will detect attempts to patch the kernel.