QuickFox Supply Chain Attack Delivers FDMTP Backdoor via Trojanized Windows Installer

Cybersecurity researchers have disclosed what has been described as a "long-standing supply chain attack" on QuickFox, a virtual private network (VPN) and network acceleration tool designed for overseas Chinese users. According to Fortinet FortiGuard Labs, the supply chain attack has been ongoing since at least August 2025 and involves a trojanized version of the application to deliver FDMTP, a

Reported facts: The article describes a long-standing supply chain attack against QuickFox, a VPN and network acceleration tool, where a trojanized Windows installer has been used since at least August 2025 to deliver the FDMTP backdoor to users. This indicates that the software distribution channel for QuickFox was compromised, allowing attackers to insert malicious code into legitimate updates or installers. RealGround analysis: While the report does not explicitly mention AI components, similar supply chain attacks are a critical risk for AI-enabled products and services that rely on third‑party libraries, installers, or update mechanisms. Organizations should implement rigorous software bill of materials (SBOM) practices, code-signing verification, and continuous integrity checks across their AI supply chain to prevent malicious binaries or dependencies from being introduced into AI agents and infrastructure.