Supply chain attacks are nothing new. What happens is that when a company's website is hacked, attackers take the opportunity to inject official and legitimate software with code that will cause this software to become a carrier of malware without anyone's knowledge.
That's what happened with computer manufacturer GEEKOM, which is from China, where it was recently discovered that their LAN component driver software was injected with malware that tracks keylogger input and also allows remote access to your computer as long as your computer is connected to the internet.
This was reported by VIdeocardz, where GEEKOM said that although it is true that the website contains a link to download this affected software, the site should not be accessible through their main website, but since it is still listed through search engines such as Google and others, this site is still accessed by many GEEKOM computer customers.
Meanwhile, they have also confirmed that GEEKOM-built computers are not affected by this malware. The website containing the affected software has been deleted, and as long as their users download the software accessed through the main website, their computers will not be affected.
However, for their computers that have been infected with the virus, GEEKOM's recommendation is to reset and reinstall a new operating system and ensure that driver software is downloaded by accessing the GEEKOM website directly.
Supply chain attacks are also nothing new. A few months ago, Daemon Tools software experienced a similar issue through their software that had been downloaded by many users for several months.
