DAEMON Tools Supply Chain Attack Confirmed, Malware-Free Version Released

Disc Soft Limited, the developer behind DAEMON Tools Lite, has confirmed that its software was compromised in a supply chain attack. BleepingComputer reports that the software was trojanized, indicating malicious code was injected into legitimate distribution channels, affecting users who downloaded specific versions.

The company has since released an updated, malware-free version of DAEMON Tools Lite. This incident underscores the persistent threat of supply chain attacks, where attackers target software vendors to distribute malware through trusted channels, bypassing traditional perimeter defenses and directly impacting end-users.

For defenders, this means vigilance against even widely trusted software. Attackers understand that organizations have robust perimeter defenses, so they pivot to compromise the software itself. This attack vector is highly effective, as the malicious payload comes signed and from a legitimate source, often evading detection.