Microsoft has exposed Tarrask, a piece of malware from a likely China-backed, state-sponsored hacking group that targets Windows machines by creating invisible scheduled software updates. The Windows maker has attributed the malware to Hafnium, the same hacking group that the US and UK blamed on Exchange Server hacks last year.
Link: Microsoft: These hackers are using a simple trick to hide their Windows malware
via http://www.zdnet.com