Download Malware? No, thanks. How Formal Methods can Block Update Attacks