Reply to post: Re: initial attack vector

Re: initial attack vector

Probably stupid developer had sharing open to the internet. They payload got in, reported back an interesting victim, downloaded other modules and the hackers infected the update.