Hackers Breach ILSpy WordPress Domain to Deliver Malware

The ILSpy WordPress site was compromised and altered to redirect users attempting to download the tool to a malicious domain that coerced visitors into installing a fake browser extension, a social-engineering vector that can steal credentials, cookies, and install further malware; site operators have taken the domain offline and users are advised to obtain ILSpy from its official GitHub and scan for unexpected extensions or compromises.