Investigating Ephemeral Supply Chain Tampering

Google Threat IntelligenceOctober 15, 2026Threat Intel AppSec Endpoint

MentionsGoogle Microsoft Microsoft Windows

Written by: Tyler McLellan Introduction Google Threat Intelligence Group (GTIG) and Mandiant investigated a software supply chain compromise campaign targeting the update infrastructure belonging to AOMEI Technology between April 2026 and July 2026. The threat actor conducted repeated, short-burst configuration tampering against AOMEI origin servers.

Summary from Google Threat Intelligence.

Read the full article at Google Threat Intelligence

Explained

The technology and terms in this story. Learn more

Investigating Ephemeral Supply Chain Tampering

Explained

More in Threat Intel

Synthetic identities leave US lenders with $2.4 billion in fraud exposure

Sponsored: Should your threat hunt become a detection?

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 120

BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot

Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet