🔴 Daemon Tools Hackers’ NeedyMantis Malware Dissected by Microsoft

Microsoft has analyzed a malware framework used by a China-based threat actor in attacks against telecommunications and governmental organizations.

Dubbed NeedyMantis, the framework was discovered during the follow-on analysis of indicators of compromise (IoCs) associated with the May 2026 Daemon Tools supply chain attack.

Thousands of computers were infected through poisoned Daemon Tools iterations distributed through the official website, and a backdoor was deployed on roughly a dozen of them. Government, scientific, manufacturing, and retail organizations in Belarus, Russia, and Thailand were hit.