THE developer of a popular utility software has been forced to release a new version after confirming reports that threat actors managed to hide malware in a previous iteration. Disc Soft said it released the malware-free Version 12.6 of its Daemon Tools Lite product on May 5, less than 12 hours after being notified of the supply chain attack.
“Following an internal investigation, we identified unauthorized interference within our infrastructure,” it confirmed in a post on May 7, and said that certain installation packages were released in a compromised state. The incident has been contained, with affected systems isolated and compromised files removed from distribution, and all currently available versions verified to be safe.
The affected version 12.5.1 has been removed, and the latest version 12.6.0.2445 no longer exhibits the behaviour associated with the incident. Earlier this week, Kaspersky warned that Daemon Tools installers distributed from the main website had been Trojanized since April 8, noting thousands of infection attempts in more than 100 countries, with further payloads seen on only a dozen machines.