Daemon Tools

Disc Soft Limited confirmed a breach of DAEMON Tools Lite through a supply chain attack and released a new malware-free version. The software had been trojanized prior to the release of the updated version. Users can now download the secure version.

Hackers compromised Daemon Tools by tampering with installers and distributing them through the software's official website, according to researchers at Kaspersky. This is a global supply-chain attack affecting a popular program used to mount disk images as virtual drives. The attackers distributed the compromised installers through the official Daemon Tools website.

Daemon Tools, a widely used disk imaging app, has been compromised in a month-long supply-chain attack, pushing malicious updates to thousands of machines worldwide. The infected versions, ranging from 12.5.0.2421 to 12.5.0.2434, collect system information and send it to an attacker-controlled server. The attack targets select groups, including retail, scientific, government, and manufacturing organizations.

Hackers trojanized DAEMON Tools installers to deploy a backdoor to thousands of systems since April 8. The affected systems downloaded the product from the official website. This supply-chain attack compromised the security of many users.

A supply chain attack has compromised DAEMON Tools software installers with malware, distributing it from the official website and signed with legitimate digital certificates. The attack was identified by Kaspersky researchers. The malicious payload is served through compromised installers.

Kaspersky has detected a widespread attack where Chinese hackers planted a backdoor into Daemon Tools, resulting in thousands of infection attempts and at least a dozen successful hacks. The malicious versions of the popular Windows software were installed by users. This attack has compromised the security of many systems.