Hackers Hijacked AOMEI Backupper Updates From April to July
- —Configuration files were tampered with from April to July in minute-long windows
- —Attackers abused the promotional pop-up channel, which did not authenticate config files
- —On July 20 they tried to force machines to send Windows password hashes
- —Google identified victims in IT, telecom and higher education across nearly a dozen countries
Why it matters: The supply-chain compromise shows trusted software updaters can become an infection vector even without a breach of the core application.
Source: DiarioBitcoin