Malware Found in the Long-Running Virtual Drive Software "DAEMON Tools," Revealing It Had Been Officially Distributed Unnoticed for Nearly a Month

Kaspersky found that the official DAEMON Tools Lite installer had been tampered with and shipped backdoors and spyware-like malware.

Affected versions were 12.5.0.2421 through 12.5.0.2434, distributed through the legitimate site and signed installer, making the infection hard to spot.

The developer, Disc Soft Limited, acknowledged the compromise, removed the affected builds, and released a fixed version, 12.6.0.2445.

The incident shows how a supply-chain attack can spread malware through trusted distribution channels to many endpoints.