THE BASIC PRINCIPLES OF HTTPS://WWW.WINBOX.DOWNLOAD/LOGIN/

Transforming the updater to work with https in place of latest plaintext http can be very good and easy initial step. It can be great reward if it also checks new exe's signature, but in 1st position, it should not enable anyone on the best way to intercept requests so effortlessly.*) make DLL hijacking attack not get the job done: Winbox will not