> TritonInfoSec News
Home / Oct 17, 2026 / Story
0
#2 The Hacker News general October 16, 2026 at 16:43 UTC

Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor

By [email protected] (The Hacker News)

AI Summary

Between May and July 2026, attackers repeatedly poisoned AOMEI Backupper's official update servers in 5–10 minute windows, causing any installation that checked for updates during those windows to download and execute a backdoor. The investigation was conducted by Google Threat Intelligence Group, Mandiant, and ManageEngine's Threat Analysis team, marking a sophisticated supply-chain-style attack targeting a widely deployed Windows backup product. Administrators using AOMEI Backupper should audit systems for backdoor artifacts and verify update integrity.

Read full article → https://thehackernews.com/2026/10/attackers-tamper…

Relevance score: 89.0/100

# More from October 17

  1. 1
    China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers The Hacker News
  2. 3
    Targeted ads delivered 0-click exploits to install mercenary malware Ars Technica Security
  3. 4
    Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory The Hacker News
  4. 5
    OpenAI Models Hacked Data Portals, Raided a Crypto Wallet to Finish Tasks SecurityWeek
  5. 6
    Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis SecurityWeek
  6. 7
    BAE Systems cyberattack disrupts US federal court operations BleepingComputer
  7. 8
    PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions The Hacker News
  8. 9
    GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositories The Hacker News
  9. 10
    Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers BleepingComputer