Attackers Tampered with AOMEI Backupper’s Update Servers for Minutes to Deliver a Backdoor

Attackers repeatedly changed the files that AOMEI Backupper fetches from the vendor’s own update servers, in windows of five to ten minutes at a time between May and July 2026, so that any copy of the Windows backup program that checked for an update during one of those windows would download and run a backdoor.

Google Threat Intelligence Group, Mandiant, and ManageEngine’s Threat Analysis

Source: The Hacker News

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Google Fined €403 Million Over GDPR Violations Tied to Location Data

Google Fined €403 Million Over GDPR Violations Tied to Location Data Google has been fined €403 million for breaking the EU’s data protection law, the GDPR, in the way three of its

Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication

Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication A high-severity security flaw impacting open-source developer platform Windmill has come under active exploitation in the wild, per VulnCheck.

FBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal Hack

FBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal Hack The FBI has arrested another suspected co-conspirator of ShinyHunters, FBI Director Kash Patel said on October 9 in