Because the update mechanisms didn’t use TLS or cryptographic signatures to authenticate the connections or downloaded software...
What! The! Fuck!
Mac and Windows users infected by software updates delivered over hacked IS…
DNS poisoning attack worked even when targets used DNS from Google and Cloudflare.
Ars Technica•ARSTECHNICA.COM
🤦2