Skip to content

Modified Radmin Server

Named by 2 kept items in this workspace.

Search every workspace for Modified Radmin Server. It matches the name as written, so it can find other things that share it.

The items that name it 2

  • AOMEI Backupper Compromised in Short-Burst Supply Chain Campaign
    article2026-10-20It is written here as Modified Radmin Server (legitimate Radmin Server delivered with a malicious DLL that opens a reverse TCP connection to the attackers' C&C server).

    legitimate Radmin Server delivered with a malicious DLL that opens a reverse TCP connection to the attackers' C&C server

  • Investigating Ephemeral Supply Chain Tampering
    writeup2026-10-15It is written here as Modified Radmin Server (backdoor installed via rsetup64.exe /intsetup during the May 28 wave).

    backdoor installed via rsetup64.exe /intsetup during the May 28 wave

All threat actors in this workspace.