AOMEI backup software update servers compromised to distribute malware

AOMEI has faced a security incident involving its update servers, which were reportedly compromised to facilitate the distribution of malware. According to reports, attackers gained unauthorized access to the servers and utilized a built-in promotional feature within the company's backup software to deliver the malicious payload.

To facilitate the attack and remain undetected, the hackers briefly manipulated configuration files associated with the update process. Once the deployment was executed, the files were reverted to their original state, an attempt to hide the intrusion. The extent of the compromise and the total impact on users remain limited to the information currently available regarding this server-side manipulation.

Source: BleepingComputer
Original article: https://www.bleepingcomputer.com/news/security/hackers-hijack-aomei-update-servers-to-secretly-spread-malware/