5 ms·

The MITM on HTTPS traffic that seems to be involved in the first attack stages is actually pretty good evidence.

• jtgeibel 11y ago
  Do you have a link to this? I haven't seen anything regarding HTTPS injection. Just injection of code into javascript resources hosted by Baidu CDN, over HTTP.
• Buge 11y ago
  If there is a MITM on https then browsers need to untrust those certs.