This doesn't allege that they produced malware, only that they produced false positives for competitors. They didn't deploy any actual malware. It sounds like

This doesn't allege that they produced malware, only that they produced false positives for competitors. They didn't deploy any actual malware. It sounds like they took advantage of the fact that most malware fingerprinting uses md5 to create collisions with known good files, then uploaded bad files with a matching signature to the places that aggregate bad md5s. Again, all allegedly.