Doing the basics right prevents this attack:

- verify your downloads .. especially firmware, AND

- keeping your signing devices secure

Great work 🤝

https://darkskippy.com/