Transforming the updater to implement https as opposed to current plaintext http might be excellent and simple starting point. It's great bonus if it also checks new exe's signature, but in very first spot, it should not enable any one on the way in which to intercept requests so https://remingtonhrzfm.bloggactif.com/36522691/helping-the-others-realize-the-advantages-of-login-winbox