Mystery hacker pwns Dridex Trojan botnet... to serve antivirus installer

Ah, great. Ave AV

Part of the distribution channel of the Dridex banking Trojan botnet may have been hacked, with malicious links replaced by installers for Avira Antivirus."