Hacked ISP infects users receiving unsecure software updates

Hackers executed a malware attack on Windows and Mac users by compromising their ISP and tampering with software updates on unsecure connections to poison domain name system (DNS) responses. The six apps affected, including 5KPlayer and Rainmeter, were bypassed due to the lack of a cryptographic signature. In order to avoid further attacks, users are advised to use DNS over HTTPS or DNS over TPS.