DAEMON Tools Lite 12.5.1 Supply Chain Poisoning Advisory

Vulnerability Overview Incident Description: DAEMON Tools Lite experienced a supply chain security incident where some installation packages were tampered with and contained malicious code. Discovery Date: May 6, 2024. Affected Version: DAEMON Tools Lite 12.5.1. Impact Scope Affected Product: DAEMON Tools Lite 12.5.1. Other Products: DAEMON Tools Ultra, DAEMON Tools Pro, and other products remain unaffected, operating normally and securely. Remediation Measures Immediate Actions: - Isolate and protect affected systems. - Remove all potentially infected files from distribution channels. - Audit build and release processes. - Rebuild and verify installation packages. - Strengthen internal security controls and monitoring systems. User Recommendations: - Uninstall the installed version of DAEMON Tools Lite 12.5.1. - Perform a full system scan using trusted security or antivirus software. - Download the latest version of DAEMON Tools Lite (12.6) from the official website. Current Status Infrastructure: Hardened and all infected files removed. Latest Version: DAEMON Tools Lite 12.6.0.2445 has been released, with no incident-related behaviors. Risk Assessment: Based on current evaluation, the issue is under control, and users downloading the latest version face no ongoing risks. Follow-Up Actions Continuous Improvement: The team will continue to strengthen infrastructure and internal processes to ensure the highest standards of security protection. Acknowledgments: Thanks to the cybersecurity research community for their support, especially the collaboration with Kaspersky's Global Research and Analysis Team. Additional Information Official Statement: DAEMON Tools has issued an official statement detailing the incident and response measures. Related Links: Links to other relevant articles, such as using DAEMON Catch! for photo transfers, creating Windows 10 and Windows To Go bootable drives, etc. --- Note: The page does not include specific POC code or exploit code.

Goal Reached Thanks to every supporter — we hit 100%!

DAEMON Tools Lite 12.5.1 Supply Chain Poisoning Advisory