Running at system boot, it periodically polled the update domain to execute any code served, with full privileges.

Read the full article at SecurityWeek →