Attackers Tampered with AOMEI Backupper’s Update Servers for Minutes to Deliver a Backdoor

Attackers repeatedly changed the files that AOMEI Backupper fetches from the vendor’s own update servers, in windows of five to ten minutes at a time between May and July 2026, so that any copy of the Windows backup program that checked for an update during one of those windows would download and run a backdoor.

Google Threat Intelligence Group, Mandiant, and ManageEngine’s Threat Analysis

Source: The Hacker News

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Anthropic to Require ID Verification for Certain Capabilities Starting July 8

Anthropic to Require ID Verification for Certain Capabilities Starting July 8 Source: Hacker News

SilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATs

SilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATs A previously unreported cyber espionage operation dubbed SilkParasite has been observed targeting government bodies in Central Asia. The intrusion

CISA Warns Critical Lantronix EDS5000 Flaw Is Being Actively Exploited

CISA Warns Critical Lantronix EDS5000 Flaw Is Being Actively Exploited The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation of a critical security flaw impacting