Menlo Labs research team says framework’s social engineering toolkit helps criminals impersonate software updates. Source