AOMEI update servers hijacked to push malware via backup software

Threat actors compromised AOMEI's update infrastructure, abusing a promotional feature in its backup software to distribute malware. The attackers briefly altered configuration files, then restored them to conceal the intrusion. The scope of affected users and the malware payload remain unclear, but supply-chain attacks on software update mechanisms pose systemic risk.