Geekom mini PCs were vulnerable to malware. Here's how to check yours

PCWorld reports that Geekom mini PCs, including the A7, A8, AE7, and AE8 series, were compromised after attackers injected backdoors into drivers hosted on an outdated support page, enabling spying and password theft. Only users who downloaded drivers through unofficial search engine results are affected, while the current official Geekom website remains safe. Affected users should disconnect from the network, run antivirus scans, change passwords, and consider a factory reset. Detailed instructions are provided below. A few days ago, Tom's Hardware and Videocardz reported on a Geekom incident affecting several of the manufacturer's mini PCs. Attackers were able to inject malware onto several devices via a tampered driver--one that was hosted on an official Geekom support page, which, according to the company, had already been taken offline. Geekom confirmed the incident and explained that, although the outdated website had been replaced by a new one, it could still be found via search engines. The attackers exploited this to insert a backdoor into the driver package, enabling them to install malware on Geekom mini PCs.