Written by: Tyler McLellan Introduction Google Threat Intelligence Group (GTIG) and Mandiant investigated a software supply chain compromise campaign targeting the update infrastructure belonging to AOMEI Technology between April 2026 and July 2026. The threat actor conducted repeated, short-burst configuration tampering against AOMEI origin servers. Each tampering window remained active for only five to ten minutes before reverting to authentic versions.
Investigating Ephemeral Supply Chain Tampering
About this summary. This is a short, independently written summary of an article first published by Google Threat Intelligence Group. Cyber Security News did not report or verify the underlying story. Read the original: https://cloud.google.com/blog/topics/threat-intelligence/investigating-ephemeral-supply-chain-tampering/
Source attribution: headline and facts are from Google Threat Intelligence Group (cloud.google.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Star Blizzard refines phishing and malware delivery with the RedFlick technique
Star Blizzard TTPs observed in 2026 Defending against Star Blizzard and RedFlick-related activity Microsoft Defender detections Hunting queries Indicators of compromise…
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 115
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Gray Rabbits and…
Chrome Dev for Desktop Update
The Dev channel has been updated to 158.0.8106.0 for Windows, Mac and Linux. A partial list of changes is available in the Git log. Interested in switching release…
Chrome Beta for Desktop Update
The Chrome team is excited to announce the promotion of Chrome 157 to the Beta channel for Windows, Mac and Linux. Chrome 157.0.8103.6 contains our usual under-the-hood…
Chrome for Android Update
Hi, everyone! We've just released Chrome 155 (155.0.8059.84) for Android. It'll become available on Google Play over the next few days.
Google security advisory (AV26-1045)
Serial number: AV26-1045 Date: October 15, 2026 As of October 13, 2026, Google is affected by vulnerabilities in the following product: Stable Channel Chrome for Desktop…