From Cybersecurity Help – TheWizards APT group uses SLAAC spoofing to perform AitM attacks

By hijacking the update process, TheWizards serve malicious updates that download and execute backdoors like WizardNet. 

​ Read More 

​