A sophisticated attack campaign dubbed “Operation ShadowHammer” involved an advanced persistent threat group planting backdoors within Asus computers. Security firm Kaspersky Lab says attackers subverted the Taiwan-based PC manufacturer’s third-party supply chain and updater software to distribute the malware. The majority of victims are in Russia, although this is based on malware spotted by its own tools, researchers say. The attackers used legitimate certificates such as “AsusTeK Computer Inc.,” as part of the trojanized updates.”]
Source: https://www.govinfosecurity.com/operation-shadowhammer-shows-weakness-supply-chains-a-12251