The malware pretends to be a legitimate download for an app like Google Chrome. Post navigation An undercover Google analyst infiltrated a notorious supply-chain hacking gang