#daemontools — Public Fediverse posts

https://www.europesays.com/at/151691/ JDownloader verteilte Malware-Downloads | heise online #AT #Austria #DaemonTools #Download #IT #JDownloader #Malware #Österreich #Science #Science&Technology #Security #Technik #Technology #Wissenschaft #Wissenschaft&Technik

RE: https://infosec.exchange/@j91321/116538743903081567

Seen some people online speculating whether #DAEMONTools and #JDownloader were compromised by the same adversary. I guess because people associate both of these tools with piracy?

I would be surprised if this was the case. The DAEMONTools compromise had very competent tradecraft. There was proper enumeration, targeting with different minimalistic payloads. I've seen some of the hands-on activity from mcrypto.chiper payload. It was mostly living-off-the-land. Low noise enumeration, then louder attempts at credential dumping. Skedaddled when they noticed EDR.

JDownloader so far seem like pack a bunch of Python scripts, drop TOR and YOLO.

RE: https://infosec.exchange/@j91321/116538743903081567

Seen some people online speculating whether #DAEMONTools and #JDownloader were compromised by the same adversary. I guess because people associate both of these tools with piracy?

I would be surprised if this was the case. The DAEMONTools compromise had very competent tradecraft. There was proper enumeration, targeting with different minimalistic payloads. I've seen some of the hands-on activity from mcrypto.chiper payload. It was mostly living-off-the-land. Low noise enumeration, then louder attempts at credential dumping. Skedaddled when they noticed EDR.

JDownloader so far seem like pack a bunch of Python scripts, drop TOR and YOLO.

RE: https://infosec.exchange/@j91321/116538743903081567

Seen some people online speculating whether #DAEMONTools and #JDownloader were compromised by the same adversary. I guess because people associate both of these tools with piracy?

I would be surprised if this was the case. The DAEMONTools compromise had very competent tradecraft. There was proper enumeration, targeting with different minimalistic payloads. I've seen some of the hands-on activity from mcrypto.chiper payload. It was mostly living-off-the-land. Low noise enumeration, then louder attempts at credential dumping. Skedaddled when they noticed EDR.

JDownloader so far seem like pack a bunch of Python scripts, drop TOR and YOLO.

RE: https://infosec.exchange/@j91321/116538743903081567

Seen some people online speculating whether #DAEMONTools and #JDownloader were compromised by the same adversary. I guess because people associate both of these tools with piracy?

I would be surprised if this was the case. The DAEMONTools compromise had very competent tradecraft. There was proper enumeration, targeting with different minimalistic payloads. I've seen some of the hands-on activity from mcrypto.chiper payload. It was mostly living-off-the-land. Low noise enumeration, then louder attempts at credential dumping. Skedaddled when they noticed EDR.

JDownloader so far seem like pack a bunch of Python scripts, drop TOR and YOLO.

This Week in Security: Another Linux Exploit, Ubuntu Knocked Offline, Finals Interrupted, and Backdoored Tools

https://fed.brid.gy/r/https://hackaday.com/2026/05/08/this-week-in-security-another-linux-exploit-ubuntu-knocked-offline-finals-interrupted-and-backdoored-tools/

This Week in Security: Another Linux Exploit, Ubuntu Knocked Offline, Finals Interrupted, and Backdoored Tools

https://fed.brid.gy/r/https://hackaday.com/2026/05/08/this-week-in-security-another-linux-exploit-ubuntu-knocked-offline-finals-interrupted-and-backdoored-tools/

#DAEMONTools devs confirm breach, release #malware-free version

https://www.bleepingcomputer.com/news/security/daemon-tools-devs-confirm-breach-release-malware-free-version/

#cybersecurity

#DAEMONTools devs confirm breach, release #malware-free version

https://www.bleepingcomputer.com/news/security/daemon-tools-devs-confirm-breach-release-malware-free-version/

#cybersecurity

#DAEMONTools devs confirm breach, release #malware-free version

https://www.bleepingcomputer.com/news/security/daemon-tools-devs-confirm-breach-release-malware-free-version/

#cybersecurity

#DAEMONTools devs confirm breach, release #malware-free version

https://www.bleepingcomputer.com/news/security/daemon-tools-devs-confirm-breach-release-malware-free-version/

#cybersecurity

#DAEMONTools devs confirm breach, release #malware-free version

https://www.bleepingcomputer.com/news/security/daemon-tools-devs-confirm-breach-release-malware-free-version/

#cybersecurity

Daemon Tools Software Trojanized in Supply Chain Attack

Malware was discovered hidden in certain Daemon Tools Lite installers, prompting developer Disc Soft to issue a clean build and confirm a supply chain attack had compromised their system. A malware-free version was released within 12 hours of notification.

https://osintsights.com/daemon-tools-software-trojanized-in-supply-chain-attack?utm_source=mastodon&utm_medium=social

#SupplyChainAttack #MalwareOperations #DaemonTools #EmergingThreats

#DaemonTools: Mit #Malware verseuchte Downloads | Security https://www.heise.de/news/Daemon-Tools-Lite-Infizierte-Installer-durch-Supply-Chain-Attacke-11282006.html #SupplyChain

#DaemonTools: Mit #Malware verseuchte Downloads | Security https://www.heise.de/news/Daemon-Tools-Lite-Infizierte-Installer-durch-Supply-Chain-Attacke-11282006.html #SupplyChain

#DaemonTools: Mit #Malware verseuchte Downloads | Security https://www.heise.de/news/Daemon-Tools-Lite-Infizierte-Installer-durch-Supply-Chain-Attacke-11282006.html #SupplyChain

#DaemonTools: Mit #Malware verseuchte Downloads | Security https://www.heise.de/news/Daemon-Tools-Lite-Infizierte-Installer-durch-Supply-Chain-Attacke-11282006.html #SupplyChain

無料版DAEMON Tools Liteにマルウェア混入！今すぐ確認すべき理由
https://softantenna.com/blog/daemon-tools-lite-supply-chain-attack/

#softantenna_blog #ソフトウェア #daemontools

Headline: DAEMON TOOLS supply chain attack ongoing since April, thousands affected

Subtitle: Security researchers have identified an active supply chain compromise in #DAEMONTools installers impacting users globally since April 2026.

Source: https://www.neowin.net/news/daemon-tools-supply-chain-attack-ongoing-since-april-thousands-affected/

#Security

Headline: DAEMON TOOLS supply chain attack ongoing since April, thousands affected

Subtitle: Security researchers have identified an active supply chain compromise in #DAEMONTools installers impacting users globally since April 2026.

Source: https://www.neowin.net/news/daemon-tools-supply-chain-attack-ongoing-since-april-thousands-affected/

#Security

Headline: DAEMON TOOLS supply chain attack ongoing since April, thousands affected

Subtitle: Security researchers have identified an active supply chain compromise in #DAEMONTools installers impacting users globally since April 2026.

Source: https://www.neowin.net/news/daemon-tools-supply-chain-attack-ongoing-since-april-thousands-affected/

#Security

Headline: DAEMON TOOLS supply chain attack ongoing since April, thousands affected

Subtitle: Security researchers have identified an active supply chain compromise in #DAEMONTools installers impacting users globally since April 2026.

Source: https://www.neowin.net/news/daemon-tools-supply-chain-attack-ongoing-since-april-thousands-affected/

#Security

Headline: DAEMON TOOLS supply chain attack ongoing since April, thousands affected

Subtitle: Security researchers have identified an active supply chain compromise in #DAEMONTools installers impacting users globally since April 2026.

Source: https://www.neowin.net/news/daemon-tools-supply-chain-attack-ongoing-since-april-thousands-affected/

#Security

DAEMON Tools Lite wurde gehackt: Seit Anfang April verteilte die offizielle Website eine mit Trojanern infizierte Version. Betroffen sind Build 12.5.0.2421 bis 12.5.0.2434. #DAEMONTools #Malware https://winfuture.de/news,158542.html?utm_source=Mastodon&utm_medium=ManualStatus&utm_campaign=SocialMedia

DAEMON Tools Lite wurde gehackt: Seit Anfang April verteilte die offizielle Website eine mit Trojanern infizierte Version. Betroffen sind Build 12.5.0.2421 bis 12.5.0.2434. #DAEMONTools #Malware https://winfuture.de/news,158542.html?utm_source=Mastodon&utm_medium=ManualStatus&utm_campaign=SocialMedia

DAEMON Tools Lite wurde gehackt: Seit Anfang April verteilte die offizielle Website eine mit Trojanern infizierte Version. Betroffen sind Build 12.5.0.2421 bis 12.5.0.2434. #DAEMONTools #Malware https://winfuture.de/news,158542.html?utm_source=Mastodon&utm_medium=ManualStatus&utm_campaign=SocialMedia

DAEMON Tools Lite wurde gehackt: Seit Anfang April verteilte die offizielle Website eine mit Trojanern infizierte Version. Betroffen sind Build 12.5.0.2421 bis 12.5.0.2434. #DAEMONTools #Malware https://winfuture.de/news,158542.html?utm_source=Mastodon&utm_medium=ManualStatus&utm_campaign=SocialMedia

DAEMON Tools Lite wurde gehackt: Seit Anfang April verteilte die offizielle Website eine mit Trojanern infizierte Version. Betroffen sind Build 12.5.0.2421 bis 12.5.0.2434. #DAEMONTools #Malware https://winfuture.de/news,158542.html?utm_source=Mastodon&utm_medium=ManualStatus&utm_campaign=SocialMedia

A month-long breach saw DAEMON Tools' official installers distributing malware, signed with *their own* legitimate digital certificates. Kaspersky researchers uncovered this sophisticated supply chain compromise, which bypassed standard security checks and targeted high-value organizations in retail, government, and manufacturing for espionage. The attackers used multi-protocol C2…

https://www.tpp.blog/192uc7c

#cybersecurity #daemontools #supplychaincompromise

🤖 This post was AI-generated.

DAEMON Tools Breach Exposes Thousands to Malware

A recent breach at DAEMON Tools exposed thousands to malware, prompting an immediate response from the company to secure its infrastructure and release a clean build of its software. Version 12.6 of DAEMON Tools Lite has been confirmed safe, and users of paid versions can continue using their software as usual.

https://osintsights.com/daemon-tools-breach-exposes-thousands-to-malware?utm_source=mastodon&utm_medium=social

#SupplyChain #Malware #SoftwareBreach #EmergingThreats #DaemonTools

Daemon Tools: backdoor nascosta nell’installer
I ricercatori di Kaspersky hanno individuato una backdoor nell’installer di Daemon Tools, popolare software per il montaggio di immagini software tramite unità ottiche virtuali. Si tratta del classico attacco supply chain che prevede l’accesso ai server usati per il download delle applicazioni. AVB Disc Soft ha rimosso gli installer infetti e pubblicato nuove versioni.

@sicurezza #daemontools

https://www.punto-informatico.it/daemon-tools-backdoor-nascosta-installer/

Daemon Tools: backdoor nascosta nell’installer
I ricercatori di Kaspersky hanno individuato una backdoor nell’installer di Daemon Tools, popolare software per il montaggio di immagini software tramite unità ottiche virtuali. Si tratta del classico attacco supply chain che prevede l’accesso ai server usati per il download delle applicazioni. AVB Disc Soft ha rimosso gli installer infetti e pubblicato nuove versioni.

@sicurezza #daemontools

https://www.punto-informatico.it/daemon-tools-backdoor-nascosta-installer/

Daemon Tools: backdoor nascosta nell’installer
I ricercatori di Kaspersky hanno individuato una backdoor nell’installer di Daemon Tools, popolare software per il montaggio di immagini software tramite unità ottiche virtuali. Si tratta del classico attacco supply chain che prevede l’accesso ai server usati per il download delle applicazioni. AVB Disc Soft ha rimosso gli installer infetti e pubblicato nuove versioni.

@sicurezza #daemontools

https://www.punto-informatico.it/daemon-tools-backdoor-nascosta-installer/

Daemon Tools: backdoor nascosta nell’installer
I ricercatori di Kaspersky hanno individuato una backdoor nell’installer di Daemon Tools, popolare software per il montaggio di immagini software tramite unità ottiche virtuali. Si tratta del classico attacco supply chain che prevede l’accesso ai server usati per il download delle applicazioni. AVB Disc Soft ha rimosso gli installer infetti e pubblicato nuove versioni.

@sicurezza #daemontools

https://www.punto-informatico.it/daemon-tools-backdoor-nascosta-installer/

Daemon Tools: backdoor nascosta nell’installer
I ricercatori di Kaspersky hanno individuato una backdoor nell’installer di Daemon Tools, popolare software per il montaggio di immagini software tramite unità ottiche virtuali. Si tratta del classico attacco supply chain che prevede l’accesso ai server usati per il download delle applicazioni. AVB Disc Soft ha rimosso gli installer infetti e pubblicato nuove versioni.

@sicurezza #daemontools

https://www.punto-informatico.it/daemon-tools-backdoor-nascosta-installer/

#Kaspersky suspects Chinese hackers planted a backdoor into #DaemonTools in ‘widespread’ attack

https://techcrunch.com/2026/05/05/kaspersky-suspects-chinese-hackers-planted-a-backdoor-into-daemon-tools-in-widespread-attack/

#cybersecurity #China

#Kaspersky suspects Chinese hackers planted a backdoor into #DaemonTools in ‘widespread’ attack

https://techcrunch.com/2026/05/05/kaspersky-suspects-chinese-hackers-planted-a-backdoor-into-daemon-tools-in-widespread-attack/

#cybersecurity #China

#Kaspersky suspects Chinese hackers planted a backdoor into #DaemonTools in ‘widespread’ attack

https://techcrunch.com/2026/05/05/kaspersky-suspects-chinese-hackers-planted-a-backdoor-into-daemon-tools-in-widespread-attack/

#cybersecurity #China

#Kaspersky suspects Chinese hackers planted a backdoor into #DaemonTools in ‘widespread’ attack

https://techcrunch.com/2026/05/05/kaspersky-suspects-chinese-hackers-planted-a-backdoor-into-daemon-tools-in-widespread-attack/

#cybersecurity #China

#Kaspersky suspects Chinese hackers planted a backdoor into #DaemonTools in ‘widespread’ attack

https://techcrunch.com/2026/05/05/kaspersky-suspects-chinese-hackers-planted-a-backdoor-into-daemon-tools-in-widespread-attack/

#cybersecurity #China

01net.com: #Cyberattaque #chinoise en cours sur le logiciel populaire #DaemonTools de #Windows : ce logiciel populaire a été #piraté, des milliers d' #ordinateurs #compromis #pirate #hacker #cybersécurité #IPSec #blueteam #redteam www.01net.com/actualites/c...

Cyberattaque chinoise en cours...

01net.com: #Cyberattaque #chinoise en cours sur le logiciel populaire #DaemonTools de #Windows : ce logiciel populaire a été #piraté, des milliers d' #ordinateurs #compromis #pirate #hacker #cybersécurité #IPSec #blueteam #redteam www.01net.com/actualites/c...

Cyberattaque chinoise en cours...

01net.com: #Cyberattaque #chinoise en cours sur le logiciel populaire #DaemonTools de #Windows : ce logiciel populaire a été #piraté, des milliers d' #ordinateurs #compromis

#pirate #hacker #cybersécurité #IPSec #blueteam #redteam

https://www.01net.com/actualites/cyberattaque-chinoise-cours-windows-logiciel-populaire-pirate-milliers-ordinateurs-compromis.html

01net.com: #Cyberattaque #chinoise en cours sur le logiciel populaire #DaemonTools de #Windows : ce logiciel populaire a été #piraté, des milliers d' #ordinateurs #compromis

#pirate #hacker #cybersécurité #IPSec #blueteam #redteam

https://www.01net.com/actualites/cyberattaque-chinoise-cours-windows-logiciel-populaire-pirate-milliers-ordinateurs-compromis.html

01net.com: #Cyberattaque #chinoise en cours sur le logiciel populaire #DaemonTools de #Windows : ce logiciel populaire a été #piraté, des milliers d' #ordinateurs #compromis

#pirate #hacker #cybersécurité #IPSec #blueteam #redteam

https://www.01net.com/actualites/cyberattaque-chinoise-cours-windows-logiciel-populaire-pirate-milliers-ordinateurs-compromis.html

01net.com: #Cyberattaque #chinoise en cours sur le logiciel populaire #DaemonTools de #Windows : ce logiciel populaire a été #piraté, des milliers d' #ordinateurs #compromis

#pirate #hacker #cybersécurité #IPSec #blueteam #redteam

https://www.01net.com/actualites/cyberattaque-chinoise-cours-windows-logiciel-populaire-pirate-milliers-ordinateurs-compromis.html

01net.com: #Cyberattaque #chinoise en cours sur le logiciel populaire #DaemonTools de #Windows : ce logiciel populaire a été #piraté, des milliers d' #ordinateurs #compromis

#pirate #hacker #cybersécurité #IPSec #blueteam #redteam

https://www.01net.com/actualites/cyberattaque-chinoise-cours-windows-logiciel-populaire-pirate-milliers-ordinateurs-compromis.html

#DAEMONTools, the target of a major #attack

https://gadgetflux.eu/daemon-tools-tinta-unui-atac-major/

DAEMON Tools installers were trojanized in a supply-chain attack, delivering a backdoor to thousands of systems worldwide since April 8 🌐
The malware affected versions 12.5.0.2421–12.5.0.2434, targeting high-value organizations and enabling remote code execution via compromised binaries 🛡️

🔗 https://www.bleepingcomputer.com/news/security/daemon-tools-trojanized-in-supply-chain-attack-to-deploy-backdoor/

#TechNews #Daemon #DAEMONTools #Malware #Security #Microsoft #Windows #Backdoor #Attack #Threat #CyberSecurity #Software #InfoSec #Hacking #Safety #Digital #Computing #Protection

DAEMON Tools installers were trojanized in a supply-chain attack, delivering a backdoor to thousands of systems worldwide since April 8 🌐
The malware affected versions 12.5.0.2421–12.5.0.2434, targeting high-value organizations and enabling remote code execution via compromised binaries 🛡️

🔗 https://www.bleepingcomputer.com/news/security/daemon-tools-trojanized-in-supply-chain-attack-to-deploy-backdoor/

#TechNews #Daemon #DAEMONTools #Malware #Security #Microsoft #Windows #Backdoor #Attack #Threat #CyberSecurity #Software #InfoSec #Hacking #Safety #Digital #Computing #Protection