ASUS Live Update client was compromised through a supply chain attack where unauthorized modifications were introduced. The modified builds contained embedded malicious code that could cause devices meeting specific targeting conditions to perform unintended actions. The attack used a hard-coded list of more than 600 unique MAC addresses to surgically target specific users. Only devices that met the targeting conditions and installed the compromised versions were affected. The attack occurred between June and November 2018.