[anonymfus]

May be their attack is so specific that they could only use Microsoft signed files in update payload, so they send old vulnerable versions.

[dpark]

That would be an amazing exploit. I doubt it's the case, and I hope it's not, but it would be pretty amazing.