I guess that cybercriminals increased their attack (ala watering hole) outcomes by digital analog of close to the home effect (as in car driving) in this one. Stay vigilant when you download things from the web, especially executables and images meant to be used to provision a bootable drive. Linux distro images are usually digitally signed using gpg (GnuPG).