Microsoft has exposed Tarrask, a piece of malware from a likely China-backed, state-sponsored hacking group that targets Windows machines by creating invisible scheduled software updates.
Microsoft: These hackers are using a simple trick to hide their Windows malware — ZDNet
Microsoft: These hackers are using a simple trick to hide their Windows malware — ZDNet