Trusted Software Got Hacked. Here’s Your Quiet Fix.

ByAmyFay Chandler

Yesterday, security researchers caught crooks distributing fake DAEMON Tools installers that looked exactly like the real thing. They were signed with real certificates, downloadable from the official site, and stuffed with malware that infected thousands of computers across more than 100 countries.

The unsettling part isn’t that someone wrote bad software. It’s that the source itself got poisoned. That means the green checkmark we all trust wasn’t actually telling us what we thought it was.

What this means for your shop

Think about everything you’ve installed in the last six months. This could include things like:

  • a POS update
  • a QuickBooks patch
  • any new software you’ve installed

Usually, we just see it and click install and go on back to life, without thinking twice.

The usual advice is to only install software you went and got yourself, never from an email or a link someone sent you. But DAEMON Tools is the harder case: the people who got hit DID go to the source. That’s the supply-chain problem, and there’s not much an individual shop can do about it once the source is compromised. Which is why today matters.

Why passkeys close the gap

The good news is that today is World Passkey Day. Here’s why it ties to the DAEMON Tools story: when malware steals a password from your computer, that password gets sold and reused everywhere — your bank, your shop accounts, your email all suddenly at risk on machines that aren’t yours. Passkeys can’t be stolen that way. They live in your phone or laptop and can’t leave. So even if a bad install slips past you someday, the damage stays on that one machine instead of cascading across your accounts. Most of the big platforms support them now (Google, Apple, Microsoft, Square, Shopify, your bank). I encourage you to turn them on if you haven’t. Five minutes, helps you a ton.

The crooks aren’t getting smarter. The locks are.

xoxo,
❤️ AmyFay

What’s happening in the world. What it means for your store.
Monday through Thursday, from AmyFay Chandler. More in Friday Retail Tidbits, every Friday morning.

Subscribe to Morning Retail Tidbit →

I’m AmyFay Chandler, a Knoxville-based wholesale sales rep serving independent retailers in Tennessee and Kentucky through Tango Showroom. I also represent Sweet Tree Jewelry and Caroline B Cook nationwide. Before I became a rep, I built two T-shirt lines, ran my own retail business, bought home and gift for Elder’s Ace Hardware, and worked with Werner Frank. I have been the maker, buyer, retailer, rep, and person at the register, so I evaluate every line from the store floor first.

I write the Morning Retail Tidbit and Friday Retail Tidbits to help local retailers buy smarter, merchandise with intention, and keep their stores valuable.

You Might Also Like