Researchers spotted an updated version of the FDMTP backdoor being deployed through DLL sideloading.