Hackers Hijack AOMEI Servers to Spread Malware

Hackers hijacked AOMEI update servers between April and July 2026, distributing CROSSROAD and SHINYROAD malware. The breach affected organizations in the United States, Australia, India, Singapore, Spain, and Switzerland, with a 10-minute exposure window on May 28. AOMEI's CTO leads an internal investigation into the supply chain breach.