Tag: configuration file abuse

Hackers Breach AOMEI Servers to Spread Malware via Software Updates

In a shocking 21-minute window, hackers hijacked AOMEI's update system not once, not twice, but three times, using the company's own mechanism against it to spread malware to customers worldwide. They manipulated two critical configuration files that controlled update and notification behavior, turning a trusted source into a malicious one.