CERT24Attackers replaced JDownloader installer downloads with malware
The JDownloader website was compromised on May 6–7, 2026. During that period, the Windows “Download Alternative Installer” links and the Linux shell installer were compromised, and the malicious Windows installers deployed a Python-based remote access Trojan (RAT).