Geekom's LAN Driver Package Distributes Malware to Mini PC Users

Geekom has removed a LAN driver package from its support pages after researchers identified the Asruex backdoor within the installer. The affected models include the A7, A8, AE7, AE8, AX7 Pro, and AX8 Pro. The malware was distributed through Geekom's official website, and the installer was flagged by multiple security tools, including VirusTotal. Users are advised to run a full system scan and replace the network driver with a trusted source. Geekom's current driver pages have been updated to prevent similar issues. The malware was not preinstalled on devices but was available for download. The executable's hash indicates that it has been flagged since December 2024. Geekom has not confirmed how many users may have been affected.

Key Points: • Geekom removed a malware-infected LAN driver from its support site after detection. • The Asruex backdoor was found in the driver package for several AMD mini PCs. • Users are advised to perform system scans and replace the compromised driver.