Kaspersky suspects Chinese hackers planted a backdoor into Daemon Tools in ‘widespread’ attack

A widespread supply chain attack has compromised Daemon Tools, a popular Windows disc imaging software, with Chinese-linked hackers injecting a backdoor that remains active and capable of deploying additional malware to thousands of systems. The attack demonstrates the critical vulnerability of software supply chains, with targeted secondary infections confirmed in retail, scientific, manufacturing, and government sectors across Russia, Belarus, and Thailand. This incident underscores an escalating threat pattern where adversaries are systematically compromising widely-used developer tools to achieve mass distribution of malware.