TechCrunch·May 5, 2026

🚨Malicious Backdoor Found in Daemon Tools Affects Thousands

Your Windows imaging software just got a security update

TL;DR

Security researchers found a backdoor in Daemon Tools that allowed hackers to plant malware on over a thousand computers. The attack targets users of the popular disc imaging software across Russia, Belarus, and Thailand.

Kaspersky security researchers discovered a malicious backdoor in Daemon Tools, a widely used Windows disc imaging software. This backdoor has been exploited by hackers to inject additional malware into at least twelve computers across various sectors including government systems. The attack is still active, targeting thousands of users running the compromised version of Daemon Tools. If you're using this software on your Windows machine, it's time for an immediate update or switch to a safer alternative. Hackers are increasingly exploiting supply chain vulnerabilities in popular software like Daemon Tools. This means that developers and IT teams need to be vigilant about updates from trusted sources and monitor their systems closely for any signs of compromise. The backdoor was first detected on April 8, with Kaspersky contacting Disc Soft, the company behind Daemon Tools, but no public response has been disclosed yet.

Malicious Backdoor Found in Daemon Tools Affects Thousands

Key Points

1

Security researchers at Kaspersky identified a malicious backdoor on April 8, targeting Daemon Tools users

2

The attack has affected over a thousand computers across Russia, Belarus, and Thailand

3

Hackers used the backdoor to plant additional malware on twelve compromised systems in various sectors including government

4

Disc Soft is aware of the report and treating it with high priority, actively investigating and addressing the issue

5

It's unknown if macOS version or other Disc Soft apps are affected; Kaspersky recommends immediate action for Windows users

Why It Matters

If you're using Daemon Tools on your Windows machine, this is a critical security update. The backdoor allows hackers to inject malware during software updates, affecting thousands of computers worldwide. Developers and IT teams must monitor their systems closely and ensure they are running the latest, uninfected version of Daemon Tools.

Daemon ToolsKasperskysupply chain attackmalware

Frequently Asked Questions

Why does this matter?

If you're using Daemon Tools on your Windows machine, this is a critical security update. The backdoor allows hackers to inject malware during software updates, affecting thousands of computers worldwide. Developers and IT teams must monitor their systems closely and ensure they are running the latest, uninfected version of Daemon Tools.

What happened?

Security researchers found a backdoor in Daemon Tools that allowed hackers to plant malware on over a thousand computers. The attack targets users of the popular disc imaging software across Russia, Belarus, and Thailand.

Comments

Subscribe to join the conversation...

Be the first to comment

Enjoyed this article?

Get it daily. 7am. Free. Reads in 5 minutes.