Attackers Tampered with AOMEI Backupper’s Update Servers for Minutes to Deliver a Backdoor

Attackers repeatedly changed the files that AOMEI Backupper fetches from the vendor’s own update servers, in windows of five to ten minutes at a time between May and July 2026, so that any copy of the Windows backup program that checked for an update during one of those windows would download and run a backdoor.

Google Threat Intelligence Group, Mandiant, and ManageEngine’s Threat Analysis

Source: The Hacker News

Tags:

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Apple caught off guard by AI demand for Mac Mini and Mac Studio

Apple caught off guard by AI demand for Mac Mini and Mac Studio Source: Hacker News

Read More

Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials

Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials A malicious MCP server could trick an application built on the official MCP Python SDK into handing over the OAuth

Read More

AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host

AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host A flaw in Linux’s vhost subsystem lets a local user read and write

Read More