Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor

The Hacker News · Friday, 16 October 2026 at 16:43 (3h ago) · Original article ↗

Attackers repeatedly changed the files that AOMEI Backupper fetches from the vendor's own update servers, in windows of five to ten minutes at a time between May and July 2026, so that any copy of the Windows backup program that checked for an update during one of those windows would download and run a backdoor.

Google Threat Intelligence Group, Mandiant, and ManageEngine's Threat Analysis

You're reading a preview. The full article is published by The Hacker News on their website.

Read the full story on The Hacker News

Security

Chicago-Area Cops Helped HSI Spy on Minnesota Anti-ICE Activists

Despite Illinois’ sanctuary laws, local police in and around Chicago helped ICE investigative agents track activists engaged in First Amendment–protected activities.

Wired 1h ago

Security

Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug

A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer overflow with a separate kernel flaw, bypassing OpenBSD's KARL kernel-address randomization and its SMAP and SMEP hardware protections. Security firm Calif,…

The Hacker News 2h ago

Security

Targeted ads installed Candiru spyware in zero-click attacks

Candiru spyware was delivered to devices at Al Jazeera Media Network via targeted online advertisements in a zero-click attack that required only rendering the malicious ads on the victim's device. [...]

BleepingComputer 2h ago

Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor

More Security & Privacy

Chicago-Area Cops Helped HSI Spy on Minnesota Anti-ICE Activists

Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug

Targeted ads installed Candiru spyware in zero-click attacks