2026-03-01 13:25 UTC
Replies (2)
-
@agowa338@chaos.social 2026-03-01 13:26
@LorenzoAncora@ieji.de Even the site you linked still says that: > Traffic from certain targeted users was selectively redirected to attacker-controlled malicious update manifests. So what are you talking about?
-
@LorenzoAncora@ieji.de 2026-03-01 13:48
@agowa338@chaos.social no, it is the same vulnerability: the security analysis only sampled a few key points in time, giving a partial, incomplete view of what the attackers did and of who they targeted. In other words, the command-and-control server can receive and execute different remote commands without leaving any trace. The developer stated who were the primary targets, but he doesn't have access to in-depth information. This is the reason he (and I) also advised all users to update.🙂 Please follow the advice in: https://ieji.de/@LorenzoAncora/116154092794477293