Product
AOMEI Backupper
- First Reported
- Oct 15, 2026
- Latest Reported
- Oct 17, 2026
Reported Context (3)
- Lab, detailed an "ephemeral supply chain tampering" of the update infrastructure belonging to AOMEI Backupper, a data backup, disk cloning, and disaster recovery software, to bypass traditional security defenses Compromised ConnectWise Credential Used to Access 173 Microsoft 365 Tenants
- Attackers repeatedly changed the files that AOMEI Backupper fetches from the vendor's own update servers, in windows of five to ten minutes at a time between May and July 2026, so that any copy of the Windows backup Attackers Tampered With AOMEI Backupper Updates to Deliver a Backdoor
- AOMEI Backupper provides data backup, disk cloning, and disaster recovery, while AnyViewer facilitates remote desktop access and support. UNC7017 Used Brief AOMEI Update Tampering to Deliver CROSSROAD and SHINYROAD
Malware (3)
People (2)
Threat Actors (1)
MITRE ATT&CK (19)
Vendors (7)
Products (9)
Tools (4)
Industries (3)
Countries (12)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.