AOMEI Backupper Compromised in Short-Burst Supply Chain Campaign

By Ionut Arghire

AI Summary

AOMEI Backupper's update infrastructure was compromised in multiple short-burst windows between April and July, during which attackers modified configuration files on update servers to push the ShinyRoad modular backdoor framework to users. AOMEI has not yet notified affected customers despite confirming the breach to Recorded Future News. This supply chain attack is particularly dangerous given AOMEI Backupper's broad deployment across enterprise and SMB environments.

Read full article → https://www.securityweek.com/aomei-backupper-compr…

Relevance score: 83.0/100

# More from October 21

1
PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert The Hacker News
2
Russian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective Loader The Hacker News
3
Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software The Hacker News
4
Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA The Hacker News
5
Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution The Hacker News
7
Police arrest Qilin ransomware suspect on holiday, as links made to Synnovis hack that contributed to patient’s death Graham Cluley
8
Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware The Hacker News
9
Pegasus Spyware Infection Confirmed on Serbian University Rector's iPhone Days Before Election The Hacker News
10
ConnectWise customers hit by supply-chain attack linked to compromised API secret CyberScoop