
The update tool is preinstalled on the majority of new Asus devices. The company said that 80 percent of victims were consumers, while 20 percent were organizations. Symantec, another cybersecurity company, found the same malware from Asus updates, and cited at least 13,000 computers affected by the attack.

The Russia-based cybersecurity company was only able to find those numbers for its own users, and estimates that the malware could affect more than a million Asus owners worldwide. Kaspersky Lab found that it affected more than 57,000 people using its products.

The hack, which Kaspersky Lab is calling Operation ShadowHammer, went on between June and November 2018. "Asus customer service has been reaching out to affected users and providing assistance to ensure that the security risks are removed," the company said in a statement.
