Attackers rewrote two unsigned files on AOMEI update servers for minutes at a stretch, and any Backupper install that polled…