malware
Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor
Medium
Summary
Attackers tampered with AOMEI Backupper's update servers between May and July 2026, injecting a backdoor into the software. Despite AOMEI fixing its servers, the backdoor remains on machines that were already compromised. The campaign involved a complex process, including a scheduled task, a WebDAV credential theft, and a staged remote administration tool.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data