MEDIUMMalware
Global

AOMEI yet to notify customers after hackers hijacked its software updates

·Source: The Record

Updated:

Executive Summary

In an email, the Hong Kong-registered company confirmed to Recorded Future News that hackers repeatedly altered configuration files on its update servers between April and July, redirecting the software to download malware for minutes at a time.

Analysis

In an email, the Hong Kong-registered company confirmed to Recorded Future News that hackers repeatedly altered configuration files on its update servers between April and July, redirecting the software to download malware for minutes at a time.
Source Attribution

Originally published by The Record on Oct 20, 2026.

Related Threats

MEDIUMMalware

Iranian Hacking Group Found Hosting C2 Infrastructure in the US

Stealthy malware campaign by ‘Prince of Persia’ threat group targeting organisations worldwide discovered operating on American soil

Infosecurity Magazine
LOWMalware

The Limits of Fingerprint Blocklists: A Reproducible Java Certificate Bypass

<div class="hs-featured-image-wrapper"> <a href="https://www.sonatype.com/blog/the-limits-of-fingerprint-blocklists-a-reproducible-java-certificate-bypass" title="" class="hs-featured-image-link"> <img src="https://www.sonatype.com/hubfs/RapidResponse_Templates_Vulnerability%20%282%29.png" alt="Image with text: "eMudhra certificate blocking bypass"" class="hs-featured-image" style="width:auto !imp

Sonatype (Maven/npm)
LOWMalware

eMudhra CA Incident: Sonatype's Assessment and Guidance

<div class="hs-featured-image-wrapper"> <a href="https://www.sonatype.com/blog/emudhra-ca-incident-sonatypes-assessment-and-guidance" title="" class="hs-featured-image-link"> <img src="https://www.sonatype.com/hubfs/RapidResponse_Templates_Malware%20%287%29.png" alt="Image with text "eMudhra CA certificate compromise"" class="hs-featured-image" style="width:auto !important; max-width:50%; float:le

Sonatype (Maven/npm)