companyAOMEI
suspectedhighSupply chainFirst reported Oct 16, 2026
AOMEI: Backupper update servers tampered with to deliver a backdoor
Attackers repeatedly altered files served by AOMEI Backupper's update servers in five-to-ten-minute windows between May and July 2026, causing copies of the Windows backup program checking for updates in those windows to download and run a backdoor. The activity was reported by Google Threat Intelligence Group, Mandiant, and ManageEngine's Threat Analysis team; no vendor advisory or AOMEI statement is cited.
Members only
The full record: the timeline and 1 linked report
- Every update as it happened, with the status at each step
- Every report behind the record, newest first
- Alerts the moment AOMEI — or anything else you track — is hit again
A free account is all it takes — no card, one minute.