A manufacturer of network routers is compromised, and attackers embed hidden code in a signed firmware update that is then distributed to thousands of customers through the vendor's automatic update service. Customers install the update believing it is legitimate, unknowingly granting attackers remote access. Which vulnerability type does this scenario BEST illustrate?