Supply Chain Vulnerability in DAEMON Tools Lite by AVB Disc Soft

⚠️ CVE-Referenzen: CVE-2026-8398
Avb Disc Soft - Daemon Tools Lite - CRITICAL - CVE-2026-8398. A recent supply chain attack targeted DAEMON Tools Lite, impacting versions 12.5.0.2421 to 12.5.0.2434. During this attack, unauthorized parties infiltrated the build and distribution infrastructure of AVB Disc Soft, successfully trojanizing installation packages available on the official website between April 8, 2026, and May 5, 2026. The malicious binaries, including DTHelper.exe, DiscSoftBusServiceLite.exe, and DTShellHlp.exe, were digitally signed with AVB Disc Soft's legitimate code-signing certificate. This allowed the compromised installers to evade signature-based detection, posing significant risks to users who installed these versions.
Quelle: securityvulnerability.io