Kaspersky suspects Chinese hackers planted a backdoor into Daemon Tools in ‘widespread’ attack

mikho

Security researchers at Kaspersky say they have identified a malicious backdoor planted in the popular and long-running Windows disc imaging software, Daemon Tools.

The Russian cybersecurity company said on Tuesday that data collected from computers around the world running the Kaspersky antivirus software shows a “widespread” attack is under way, targeting thousands of Windows computers running Daemon Tools.

https://techcrunch.com/2026/05/05/kaspersky-suspects-chinese-hackers-planted-a-backdoor-into-daemon-tools-in-widespread-attack/

AnthonySmith

Ha... I remember back in the early 00's when Daemon tools was the backdoor of choice, we have come full circle.

tulipyun

I haven’t used Daemon Tools since Windows started supporting the mounting of ISO files about 15 years ago

AnthonySmith

@tulipyun said:
I haven’t used Daemon Tools since Windows started supporting the mounting of ISO files about 15 years ago

I wonder how many people still use windows xp...

mikho

@AnthonySmith said:

@tulipyun said:
I haven’t used Daemon Tools since Windows started supporting the mounting of ISO files about 15 years ago

I wonder how many people still use windows xp...

To many....

WSS

It's all about that Alcohol 120%. Kids these days.

havoc

There's a blast from the past. Haven't heard about either daemon or alcohol in a good decade haha.

Bygone era haha

WSS

@havoc said:
There's a blast from the past. Haven't heard about either daemon or alcohol in a good decade haha.

Probably closer to two.

MGarbis

Daemon and Alcohol brings back a lot of good memories ❤️

WSS

@MGarbis - you might confuse people a little bit longer if you took off the padding in your signature. Possibly consider running through ceasar as well.

Joseph

What is Daemon Tools typically used for?

WSS

@Joseph said:
What is Daemon Tools typically used for?

Read the first sentence of the first post.

mikho

@Joseph said:
What is Daemon Tools typically used for?

disc imaging software

https://www.daemon-tools.cc/

WSS

Personally, if I had the need for anything like that again for XP, I'd use virtual clone drive. https://www.elby.ch/en/products/vcd.html

ascicode

What do you expect, if some tools arent updated for years (5-10y)
At least clonedrive got updated in 2025 after 5 years fixed a vuln.

WSS

@ascicode said:
What do you expect, if some tools arent updated for years (5-10y)
At least clonedrive got updated in 2025 after 5 years fixed a vuln.

The installer was altered on April 8th, doodt. https://thehackernews.com/2026/05/daemon-tools-supply-chain-attack.html

MGarbis

@WSS said:
@MGarbis - you might confuse people a little bit longer if you took off the padding in your signature. Possibly consider running through ceasar as well.

That was one of the easiest. 😃
This is harder, but can be solved without AI. Of course AI decode it very fast...

mikho

@MGarbis said:

@WSS said:
@MGarbis - you might confuse people a little bit longer if you took off the padding in your signature. Possibly consider running through ceasar as well.

That was one of the easiest. 😃
This is harder, but can be solved without AI. Of course AI decode it very fast...

Rules:
Signatures

No more than 2 lines for general users.
No more than 3 lines for Hosting Providers & Service Providers.
Feel free to be creative but never deceptive.
Affiliate links are fine if prefixed as affiliate links. (aff)
No Images
Abuse it and lose it (ZERO TOLERANCE)
If using affiliate links make it clear where they lead e.g. My "Vultr link"
Affiliate links or any links that inject/stuff cookies to other sites for financial gain are a no-go.
Affiliate links to hosts that have a shady reputation or have been involved in scams are not allowed.

Fix it.