AOMEI update service quietly delivered backdoors to customers
Daily Cyber News: AOMEI update service quietly delivered backdoors to customers
Attackers compromised AOMEI’s update and notification infrastructure and used the trusted delivery path to install malware through its backup software. They briefly altered configuration files, changed the expected checksum, and triggered execution without requiring the user to act. Researchers confirmed three short delivery windows between May and July.
Key context: For leaders, this matters because a legitimate backup application became the attack route, reaching organizations in several countries and sectors.
Additional detail: Hunt every system that used AOMEI Backupper during the reported period, and isolate any host that shows the published compromise indicators.
For more cybersecurity news and the full Daily Cyber newsletter, visit DailyCyber.News.
Cybersecurity training, courses, books, and resources: BareMetalCyber.com.
Topics: cybersecurity news, cybersecurity, cyber risk, malware, windows, AOMEI, service, quietly, delivered, backdoors.
