Attackers Tampered with AOMEI Backupper’s Update Servers for Minutes to Deliver a Backdoor

Attackers repeatedly changed the files that AOMEI Backupper fetches from the vendor’s own update servers, in windows of five to ten minutes at a time between May and July 2026, so that any copy of the Windows backup program that checked for an update during one of those windows would download and run a backdoor.

Google Threat Intelligence Group, Mandiant, and ManageEngine’s Threat Analysis

Source: The Hacker News

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

National Security Determination Threat Posed by Foreign-Produced Robotic Devices [pdf]

National Security Determination Threat Posed by Foreign-Produced Robotic Devices [pdf] Source: Hacker News

Be skeptical of OpenAI’s rogue hacker agent story

Be skeptical of OpenAI’s rogue hacker agent story Source: Hacker News

Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects

Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects GitLab has released security updates to address a critical vulnerability impacting its Community Edition (CE) and Enterprise Edition (EE)