Hackers breach JDownloader website to serve malware-laced downloads
Summary
Hackers compromised the JDownloader website to distribute malware-infected versions of the popular open-source download manager.
Similar Articles
I found 10k GitHub repositories distributing Trojan malware
A security researcher discovered over 10,000 GitHub repositories distributing Trojan malware by copying legitimate repositories and periodically updating readme files with malicious zip archives. The author developed a detection pattern and shared details on how the malware evades detection.
Deadbugz: Currently Active MCP Supply-Chain Campaign
Pillar Security researchers detail Deadbugz, an active supply-chain campaign that distributes a malicious MCP server through GitHub pull requests, gating credential-stealing instructions behind three benign tool calls.
For the 2nd time in weeks, Microsoft packages laced with credential stealer
For the second time in weeks, Microsoft's verified open-source packages were compromised with credential-stealing malware, affecting 73 packages on GitHub. The attack, linked to threat actor TeamPCP, uses stolen OIDC tokens and spreads laterally through cloud infrastructures.
A Hacker Group Is Poisoning Open Source Code at an Unprecedented Scale
A hacker group called TeamPCP is conducting an unprecedented wave of software supply chain attacks, compromising hundreds of open source tools and breaching companies including GitHub, Anthropic, and Mercor.
Someone on Torrent Sites Kept Fucking with My Sonarr
A hobbyist reverses a malicious .exe disguised as a South Park episode that Sonarr auto-downloaded from public torrent trackers, uncovering a ChaCha20-encrypted in-memory PE loader, anti-debug/anti-sandbox tricks, and a second-stage infostealer that harvests browser passwords and cookies.