Modifying the updater to employ https as opposed to latest plaintext http could be very good and straightforward first step. It can be nice bonus if What's more, it checks new exe's signature, but in initial spot, it mustn't allow any person on how to intercept requests so easily.