A Windows backdoor reported against developers shows how trusted build files and familiar services can be turned into stealthy malware infrastructure.