Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor
Summary
Attackers compromised AOMEI Backupper's update servers between May and July 2026, repeatedly injecting a backdoor into the software during brief windows of time. Users who checked for updates during these compromised periods would unknowingly download and install the malicious backdoor.
IFF Assessment
FOE
The discovery of a backdoor in a popular backup utility poses a significant threat to users, as it compromises data integrity and system security.
Defender Context
This incident highlights the critical importance of supply chain security and the need for robust verification mechanisms for software updates. Defenders should be vigilant about software integrity checks and consider implementing network segmentation to limit the blast radius of compromised trusted applications.