IIRC the predecessor was injected as malware into MITM'ed software downloads. So if the police wants to deploy it against a suspect they first get access to th

IIRC the predecessor was injected as malware into MITM'ed software downloads. So if the police wants to deploy it against a suspect they first get access to their network traffic and then work from there. It was intended as an alternative to breaking and entering to deploy surveillance equipment or gain physical access to hardware. Of course this approach has several obvious limitations (e.g. encryption) but there may be other approaches in use. That's just what I remember from when the original trojan was reported on a few years back.