https://threatpost.com/supply-chain-...-actor/166842/

Bit odd that there's been so little coverage fo this.