AOMEI Backupper Compromised in Supply Chain Attack

Between April and July, AOMEI Backupper served malware to users via short-burst supply chain compromises. Google Cloud and Mandiant identified higher education and telecom entities in ten countries affected. The threat actor, UNC7017, used ephemeral configuration tampering active for five to ten minutes. The campaign delivered CrossRoad, modified Radmin Server, and ShinyRoad backdoors.