Modifying the updater to use https as an alternative to current plaintext http might be superior and straightforward starting point. It can be awesome reward if it also checks new exe's signature, but in very first put, it mustn't allow anyone on the way to intercept requests so easily.*) make DLL hijacking attack not function: Winbox won't conside