Country visual unavailable
No information
DAEMON Tools Lite official installers trojanized
Attackers compromised DAEMON Tools distribution and circulated trojanized, legitimately signed installers through the official vendor channel beginning on 8 April 2026. Kaspersky observed thousands of attempted deployments in more than 100 countries and confirmed infected organizations across multiple sectors; Disc Soft removed the compromised files and released clean software in May.
75
Estimated severity
75 / 100
92
Source reliability
92 / 100
Approximate Date
08/04/2026
Targeted Company
DISC SOFT
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
Russian Federation
RUS
Brazil
BRA
Colombia
COL
Chile
CHL
Turkey
TUR
Spain
ESP
Germany
DEU
France
FRA
Italy
ITA
China
CHN
Target country
No information
Affected countries
Russian FederationBrazilColombiaChileTurkeySpainGermanyFranceItalyChina
Impacted regions
No information
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
Supply chain data integrity impact
Affected sectors
Technology & IT ServicesManufacturingRetailGovernment & Public AdministrationEducation & Research
Affected departments
Information Technology
Attack Profile
Attack types
Software supply chain compromiseMalwareBackdoor
Attributed threat actors
No information
Sources
Incident Sources
blog.daemon-tools.cchttps://blog.daemon-tools.cc/deu/post/security-incident?email_hash=0d7a7050906b225db2718485ca0f3472kaspersky.comhttps://www.kaspersky.com/blog/daemon-tools-supply-chain-attack/55691/bleepingcomputer.comhttps://www.bleepingcomputer.com/news/security/daemon-tools-trojanized-in-supply-chain-attack-to-deploy-backdoor/