That could be made to work. The altered files are being served from ips within China even if the attack comes from those external to China downloading the alter

That could be made to work. The altered files are being served from ips within China even if the attack comes from those external to China downloading the altered files.