DAEMON Tools Software Hacked to Deliver Malware in a Supply Chain Attack

Cybersecuritynews •Guru Baran • May 5, 2026

In a sophisticated supply chain attack discovered in early May 2026, the popular disk image mounting software DAEMON Tools has been compromised to deliver malicious payloads to users globally. Kaspersky security researchers identified that official installers distributed from the legitimate DAEMON Tools website were trojanized starting on April 8, 2026. These compromised installers, spanning versions […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Supply Chain Attack Compromises DAEMON Tools with Malicious Backdoor A supply chain attack has compromised the DAEMON Tools software installers, which began on April 8, 2026. Kaspersky identified that these trojanized installers, signed with legitimate digital certificates, have affected thousands of users globally, with specific targeting of organizations in the retail, scientific, government, and manufacturing sectors. The malware allows attackers to deploy additional payloads on compromised systems, with telemetry indicating infections in over 100 countries. The threat actors are suspected to be Chinese-speaking, and Kaspersky has contacted the software's developer, AVB Disc Soft, who is currently investigating the incident. The attack remains active, with ongoing risks for users who downloaded affected versions (12.5.0.2421 to 12.5.0.2434). Kaspersky's findings have been corroborated by other cybersecurity reports, emphasizing the sophistication and targeted nature of the attack. 16 sources 75

Extracted Entities

DAEMON Tools Software Hacked to Deliver Malware in a Supply Chain Attack

The full story

Extracted Entities

Attack Types (1)

Companies (1)

MITRE ATT&CK (1)