@Mer__edith Wasnt this first disclosed in 2018?

bleepingcomputer.com/news/secu

Seems like its been on the back burner for a while and just recently resurfaced.