The developers built malware before and participated in competitions used as recruiting platforms for Chinese state hackers.

A feature being disabled by default could leave users and their organizations vulnerable to commands that run automatically.