TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

Ars Technica

Widely used Daemon Tools disk app backdoored in monthlong supply-chain attack

Dan Goodin · 15 hours ago · Read original ↗

ATT&CK techniques detected

3 predictions
T1195.002Compromise Software Supply Chain
85%
“widely used daemon tools disk app backdoored in monthlong supply - chain attack daemon tools, a widely used app for mounting disk images, has been backdoored in a monthlong compromise that has pushed malicious updates from the servers of its developer, researchers said tuesday. k…”
T1195Supply Chain Compromise
83%
“##es. the malware sends them to an attacker - controlled server. thousands of machines in more than 100 countries were targeted. out of the many machines infected, about 12 of them, belonging to retail, scientific, government and manufacturing organizations, have received a follo…”
T1072Software Deployment Tools
58%
“widely used daemon tools disk app backdoored in monthlong supply - chain attack daemon tools, a widely used app for mounting disk images, has been backdoored in a monthlong compromise that has pushed malicious updates from the servers of its developer, researchers said tuesday. k…”

Summary

Daemon Tools users: It's time to check your machines for stealthy infections, stat.