Attackers Tampered with AOMEI Backupper’s Update Servers for Minutes to Deliver a Backdoor

Attackers repeatedly changed the files that AOMEI Backupper fetches from the vendor’s own update servers, in windows of five to ten minutes at a time between May and July 2026, so that any copy of the Windows backup program that checked for an update during one of those windows would download and run a backdoor.

Google Threat Intelligence Group, Mandiant, and ManageEngine’s Threat Analysis

Source: The Hacker News

Tags:

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Netherlands bracing for potentially devastating US sanctions against the ICC

Netherlands bracing for potentially devastating US sanctions against the ICC Source: Hacker News

Read More

EU Commission: addictive design Instagram and Facebook in breach of the DSA

EU Commission: addictive design Instagram and Facebook in breach of the DSA Source: Hacker News

Read More

Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE

Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE Check Point has patched two critical vulnerabilities in the way its firewall and management products handle VPN certificates. The

Read More