Hackers used Daemon Tools' own website to silently install backdoors on thousands of PCs for nearly a month
Serving tech enthusiasts for over 25 years.
TechSpot means tech analysis and advice you can trust.
What just happened? Popular disk imaging software Daemon Tools was the victim of a sophisticated supply chain attack, with threat actors distributing trojanized Windows installers through the program's official website to deliver a backdoor to thousands of PCs worldwide. The campaign began on April 8 and affected victims in more than 100 countries before being discovered.
Cybersecurity researchers at Kaspersky found that the attack compromised multiple versions of Daemon Tools, from 12.5.0.2421 through 12.5.0.2434. What made the campaign particularly difficult to detect was that the malicious installers were distributed directly from the official website and signed with legitimate digital certificates belonging to AVB Disc Soft, the software's developer – allowing the attack to go unchecked for nearly a month.
As a side note, we also distribute Daemon Tools through TechSpot Downloads, but...
Copyright of this story solely belongs to techspot.com. To see the full text click HERE
