Hackers hijack AOMEI update servers to secretly spread malware

Threat actors compromised AOMEI’s infrastructure to distribute malicious payloads using the backup software’s built-in update and promotional features. The attackers temporarily tampered with configuration files to facilitate the delivery before reverting them to hide the unauthorized modifications from defenders.