criticalclosedpatched
AOMEI Backupper update servers backdoored (Mandiant)
› AOMEI Backupper
Get an email when a new major security incident drops. No spam, unsubscribe any time.
- started
- Jun 1, 2026
- closed
- Oct 16, 2026
- CVEs
- none
- sources
- 1
## summary
Google Mandiant and ManageEngine reported that a threat actor tampered with AOMEI Backupper update servers mid-2026, pushing a backdoor to users across multiple countries. Disclosure clustered around Oct 16 2026.
severity: Critical software supply-chain
## affected
- Clients that pulled updates during the compromise window
## fixed in
- Vendor-clean updates after remediation
## news & write-ups[1]
## notes & caveats
Compromise began mid-2026 per reporting; public write-ups mid-October.
