Chinese hackers exploit software updates, infecting devices with malware since 2005

TLDR: Chinese hackers have been hijacking software updates since 2005 to install malware and compromise user data. The hackers, known as Blackwood, use advanced persistent threats to deliver NSPX30 implants through software updates targeting Chinese and Japanese entities. The malware is delivered through unencrypted HTTP traffic and may be installed on vulnerable devices like routers. The hackers have been constantly evolving their tactics since their first backdoor, Project Wood, was discovered in 2005. Victims of the attacks have been located in Japan and the UK.