GEEKOM Driver Malware Contacts Domain Previously Associated With Asruex C2
Brief
GEEKOM has confirmed that a driver package flagged as malicious was hosted on an outdated support page for its mini PCs.
The company said the file remained online after its newer support system replaced the old resource, allowing users to find and download it through search-engine results.
The incident raised concern because driver packages are normally trusted software components. Users often download them to fix Wi-Fi, Ethernet , audio, graphics, or chipset problems.
A malicious or compromised driver installer can therefore pose a serious supply-chain risk, as victims may run it believing it came from the device manufacturer.
Reports identified the affected file as a LAN driver package. GEEKOM said the problematic installer was hosted on its own support infrastructure, although the old page was not linked from the company’s regular website navigation.