1) ~2 month ago, only the spoofer was affected.

2) We have an "1-click-injector"

3) The average time are a few hours.

4) It has never been detected. The spoofer was fixed in a few days.

5) I don't think so.