Country visual unavailable
No information
JDownloader website compromise replaced installer links with malware
Between May 6 and 7, 2026, attackers altered selected download links on JDownloader’s official website so that users received malicious Windows and Linux installers instead of the intended software. JDownloader shut the site down during remediation and later restored it after securing the affected infrastructure. Although JDownloader’s genuine update infrastructure was not compromised, the trusted official download channel was manipulated to distribute malware downstream, creating a software-supply-chain data-integrity impact and temporary service unavailability.
70
Estimated severity
70 / 100
92
Source reliability
92 / 100
Approximate Date
06/05/2026
Targeted Company
JDOWNLOADER
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
No information
Affected countries
No information
Impacted regions
No information
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
Supply chain data integrity impactService unavailability
Affected sectors
Technology & IT Services
Affected departments
Information Technology
Attack Profile
Attack types
Software supply chain compromiseWeb application attackMalware
Attributed threat actors
No information
Sources
Incident Sources