JDownloader Users Targeted In New Python RAT Malware Campaign
ID: 6c42141e-7f20-5985-9307-36c1b1c33887
STIX ID: report--6c42141e-7f20-5985-9307-36c1b1c33887
Feed Name: Cyber Press
Threat Score
In early May 2026 JDownloader's official website was compromised for a short window (May 6–7), during which attackers swapped alternative Windows and Linux installer links to distribute a Python-based Remote Access Trojan capable of credential theft; the report lists specific malicious file names, sizes, and SHA256 hashes and recommends full system reinstallation and credential resets for affected users.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.