Attackers Tampered with AOMEI Backupper’s Update Servers for Minutes to Deliver a Backdoor

Attackers repeatedly changed the files that AOMEI Backupper fetches from the vendor’s own update servers, in windows of five to ten minutes at a time between May and July 2026, so that any copy of the Windows backup program that checked for an update during one of those windows would download and run a backdoor.

Google Threat Intelligence Group, Mandiant, and ManageEngine’s Threat Analysis

Source: The Hacker News

Tags:

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Attack Update: Top 5 Attack-IPs auf doode.info – 24.08.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 74.7.227.40 — 2400 requests (recent log) 89.167.35.212 — 194 requests (recent log) 35.196.194.152 — 168 requests (recent

Read More

Attack Update: Top 5 Attack-IPs auf doode.info – 31.08.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 34.68.39.29 — 668 requests (recent log) 34.70.129.79 — 483 requests (recent log) 89.167.35.212 — 478 requests (recent

Read More

Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup

Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup An unauthenticated attacker can read any file the service account can access on Gitea, the self-hosted Git platform,

Read More