This Week in Security: Another Linux Exploit, Ubuntu Knocked Offline, Finals Interrupted, and Backdoored Tools

https://fed.brid.gy/r/https://hackaday.com/2026/05/08/this-week-in-security-another-linux-exploit-ubuntu-knocked-offline-finals-interrupted-and-backdoored-tools/

RE: https://infosec.exchange/@j91321/116538743903081567

Seen some people online speculating whether #DAEMONTools and #JDownloader were compromised by the same adversary. I guess because people associate both of these tools with piracy?

I would be surprised if this was the case. The DAEMONTools compromise had very competent tradecraft. There was proper enumeration, targeting with different minimalistic payloads. I've seen some of the hands-on activity from mcrypto.chiper payload. It was mostly living-off-the-land. Low noise enumeration, then louder attempts at credential dumping. Skedaddled when they noticed EDR.

JDownloader so far seem like pack a bunch of Python scripts, drop TOR and YOLO.

DAEMON Tools advisory, updated yesterday: Security Incident Affecting DAEMON Tools Lite: What We Know So Far https://blog.daemon-tools.cc/post/security-incident

More:

Bitdefender: DAEMON Tools Lite breach prompts urgent update after malware-laced installer https://www.bitdefender.com/en-us/blog/hotforsecurity/daemon-tools-breach-malware #infosec #malware #databreach #Daemontools

“Un incident potentiel de sécurité” : compromission de #DaemonTools Lite par un Cheval de Troie, depuis début Avril 2026 !

https://blog.sosordi.net/2026/05/un-incident-potentiel-de-securite-compromission-de-daemon-tools-lite-par-un-cheval-de-troie-depuis-debut-avril-2026.html

#securite #date #vieprivee #trojan

#DAEMONTools devs confirm breach, release #malware-free version

https://www.bleepingcomputer.com/news/security/daemon-tools-devs-confirm-breach-release-malware-free-version/

#cybersecurity

Daemon Tools Software Trojanized in Supply Chain Attack

Malware was discovered hidden in certain Daemon Tools Lite installers, prompting developer Disc Soft to issue a clean build and confirm a supply chain attack had compromised their system. A malware-free version was released within 12 hours of notification.

https://osintsights.com/daemon-tools-software-trojanized-in-supply-chain-attack?utm_source=mastodon&utm_medium=social

#SupplyChainAttack #MalwareOperations #DaemonTools #EmergingThreats

Headline: DAEMON TOOLS supply chain attack ongoing since April, thousands affected

Subtitle: Security researchers have identified an active supply chain compromise in #DAEMONTools installers impacting users globally since April 2026.

Source: https://www.neowin.net/news/daemon-tools-supply-chain-attack-ongoing-since-april-thousands-affected/

#Security