<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[https:&#x2F;&#x2F;www.bleepingcomputer.com&#x2F;news&#x2F;security&#x2F;jdownloader-site-hacked-to-replace-installers-with-python-rat-malware&#x2F;]]></title><description><![CDATA[<p><div class="card col-md-9 col-lg-6 position-relative link-preview p-0">



<a href="https://www.bleepingcomputer.com/news/security/jdownloader-site-hacked-to-replace-installers-with-python-rat-malware/" title="JDownloader site hacked to replace installers with Python RAT malware">
<img src="https://www.bleepstatic.com/content/hl-images/2026/05/09/jdownloader-header.jpg" class="card-img-top not-responsive" style="max-height: 15rem;" alt="Link Preview Image" />
</a>



<div class="card-body">
<h5 class="card-title">
<a href="https://www.bleepingcomputer.com/news/security/jdownloader-site-hacked-to-replace-installers-with-python-rat-malware/">
JDownloader site hacked to replace installers with Python RAT malware
</a>
</h5>
<p class="card-text line-clamp-3">The website for the popular JDownloader download manager was compromised earlier this week to distribute malicious Windows and Linux installers, with the Windows payload found deploying a Python-based remote access trojan.</p>
</div>
<a href="https://www.bleepingcomputer.com/news/security/jdownloader-site-hacked-to-replace-installers-with-python-rat-malware/" class="card-footer text-body-secondary small d-flex gap-2 align-items-center lh-2">



<img src="https://www.bleepstatic.com/favicon/bleeping.ico" alt="favicon" class="not-responsive overflow-hiddden" style="max-width: 21px; max-height: 21px;" />





<p class="d-inline-block text-truncate mb-0">BleepingComputer <span class="text-secondary">(www.bleepingcomputer.com)</span></p>
</a>
</div></p><p>Ojo a esto, que se que bastante gente de por aquí usa JDownloader.</p><p>Web comprometida e instaladores con malware. Revisad que versión tenéis.</p><p><a href="https://masto.es/tags/Cyberseguridad" rel="tag">#<span>Cyberseguridad</span></a> <a href="https://masto.es/tags/JDownloader" rel="tag">#<span>JDownloader</span></a> <a href="https://masto.es/tags/Malware" rel="tag">#<span>Malware</span></a></p>]]></description><link>https://board.circlewithadot.net/topic/8efa8257-44ef-40be-ac10-1aef24b17182/https-www.bleepingcomputer.com-news-security-jdownloader-site-hacked-to-replace-installers-with-python-rat-malware</link><generator>RSS for Node</generator><lastBuildDate>Fri, 15 May 2026 02:53:20 GMT</lastBuildDate><atom:link href="https://board.circlewithadot.net/topic/8efa8257-44ef-40be-ac10-1aef24b17182.rss" rel="self" type="application/rss+xml"/><pubDate>Sun, 10 May 2026 11:09:17 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to https:&#x2F;&#x2F;www.bleepingcomputer.com&#x2F;news&#x2F;security&#x2F;jdownloader-site-hacked-to-replace-installers-with-python-rat-malware&#x2F; on Sun, 10 May 2026 11:40:59 GMT]]></title><description><![CDATA[<p><span><a href="/user/chacheneguer%40neopaquita.es">@<span>Chacheneguer</span></a></span> El mejor de los motivos, por curiosidad <img src="https://board.circlewithadot.net/assets/plugins/nodebb-plugin-emoji/emoji/android/1f604.png?v=28325c671da" class="not-responsive emoji emoji-android emoji--smile" style="height:23px;width:auto;vertical-align:middle" title=":D" alt="😄" /></p>]]></description><link>https://board.circlewithadot.net/post/https://masto.es/users/mistheart/statuses/116550091350745108</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://masto.es/users/mistheart/statuses/116550091350745108</guid><dc:creator><![CDATA[mistheart@masto.es]]></dc:creator><pubDate>Sun, 10 May 2026 11:40:59 GMT</pubDate></item><item><title><![CDATA[Reply to https:&#x2F;&#x2F;www.bleepingcomputer.com&#x2F;news&#x2F;security&#x2F;jdownloader-site-hacked-to-replace-installers-with-python-rat-malware&#x2F; on Sun, 10 May 2026 11:40:40 GMT]]></title><description><![CDATA[<p><span><a href="/user/mistheart%40masto.es">@<span>mistheart</span></a></span> Por curiosidad, claro, ya está instalao...</p>]]></description><link>https://board.circlewithadot.net/post/https://neopaquita.es/users/Chacheneguer/statuses/116550090154163451</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://neopaquita.es/users/Chacheneguer/statuses/116550090154163451</guid><dc:creator><![CDATA[chacheneguer@neopaquita.es]]></dc:creator><pubDate>Sun, 10 May 2026 11:40:40 GMT</pubDate></item><item><title><![CDATA[Reply to https:&#x2F;&#x2F;www.bleepingcomputer.com&#x2F;news&#x2F;security&#x2F;jdownloader-site-hacked-to-replace-installers-with-python-rat-malware&#x2F; on Sun, 10 May 2026 11:40:28 GMT]]></title><description><![CDATA[<p><span><a href="/user/mistheart%40masto.es">@<span>mistheart</span></a></span> De hecho he ejecutao un winget show AppWork.JDownloader y ha salido la firma digital correcta.</p>]]></description><link>https://board.circlewithadot.net/post/https://neopaquita.es/users/Chacheneguer/statuses/116550089371744669</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://neopaquita.es/users/Chacheneguer/statuses/116550089371744669</guid><dc:creator><![CDATA[chacheneguer@neopaquita.es]]></dc:creator><pubDate>Sun, 10 May 2026 11:40:28 GMT</pubDate></item><item><title><![CDATA[Reply to https:&#x2F;&#x2F;www.bleepingcomputer.com&#x2F;news&#x2F;security&#x2F;jdownloader-site-hacked-to-replace-installers-with-python-rat-malware&#x2F; on Sun, 10 May 2026 11:39:52 GMT]]></title><description><![CDATA[<p><span><a href="/user/chacheneguer%40neopaquita.es">@<span>Chacheneguer</span></a></span> Entonces no deberías tener problemas :3</p>]]></description><link>https://board.circlewithadot.net/post/https://masto.es/users/mistheart/statuses/116550086976088298</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://masto.es/users/mistheart/statuses/116550086976088298</guid><dc:creator><![CDATA[mistheart@masto.es]]></dc:creator><pubDate>Sun, 10 May 2026 11:39:52 GMT</pubDate></item><item><title><![CDATA[Reply to https:&#x2F;&#x2F;www.bleepingcomputer.com&#x2F;news&#x2F;security&#x2F;jdownloader-site-hacked-to-replace-installers-with-python-rat-malware&#x2F; on Sun, 10 May 2026 11:39:10 GMT]]></title><description><![CDATA[<p><span><a href="/user/mistheart%40masto.es">@<span>mistheart</span></a></span> Yo solo usé el instalador via winget cuando reinstalé el sistema entero, hace meses.</p>]]></description><link>https://board.circlewithadot.net/post/https://neopaquita.es/users/Chacheneguer/statuses/116550084242134392</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://neopaquita.es/users/Chacheneguer/statuses/116550084242134392</guid><dc:creator><![CDATA[chacheneguer@neopaquita.es]]></dc:creator><pubDate>Sun, 10 May 2026 11:39:10 GMT</pubDate></item><item><title><![CDATA[Reply to https:&#x2F;&#x2F;www.bleepingcomputer.com&#x2F;news&#x2F;security&#x2F;jdownloader-site-hacked-to-replace-installers-with-python-rat-malware&#x2F; on Sun, 10 May 2026 11:38:01 GMT]]></title><description><![CDATA[<p><span><a href="/user/chacheneguer%40neopaquita.es">@<span>Chacheneguer</span></a></span> </p><p>Solo ha afectado a las descargas para windows (y de linux), el canal de actualizaciones no parece que haya sido afectado (ni muchas otras como las versiones de MacOS y flatpack).</p><p>Yo lo pongo porque el otro día me dio un error al actualizar desde el propio programa y casi me descargo el instalador... pero antes de eso reinicié y luego ya si pude XD</p>

<div class="row mt-3"><div class="col-12 mt-3"><img class="img-thumbnail" src="https://masto.es/system/media_attachments/files/116/550/075/074/199/797/original/134173fa860219b3.png" alt="Link Preview Image" /></div></div>]]></description><link>https://board.circlewithadot.net/post/https://masto.es/users/mistheart/statuses/116550079703242128</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://masto.es/users/mistheart/statuses/116550079703242128</guid><dc:creator><![CDATA[mistheart@masto.es]]></dc:creator><pubDate>Sun, 10 May 2026 11:38:01 GMT</pubDate></item><item><title><![CDATA[Reply to https:&#x2F;&#x2F;www.bleepingcomputer.com&#x2F;news&#x2F;security&#x2F;jdownloader-site-hacked-to-replace-installers-with-python-rat-malware&#x2F; on Sun, 10 May 2026 11:36:25 GMT]]></title><description><![CDATA[<p><span><a href="https://masto.es/@hypnoticside94">@<span>hypnoticside94</span></a></span> A ver si sacan comunicado pronto al respecto</p>]]></description><link>https://board.circlewithadot.net/post/https://masto.es/users/mistheart/statuses/116550073413073948</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://masto.es/users/mistheart/statuses/116550073413073948</guid><dc:creator><![CDATA[mistheart@masto.es]]></dc:creator><pubDate>Sun, 10 May 2026 11:36:25 GMT</pubDate></item><item><title><![CDATA[Reply to https:&#x2F;&#x2F;www.bleepingcomputer.com&#x2F;news&#x2F;security&#x2F;jdownloader-site-hacked-to-replace-installers-with-python-rat-malware&#x2F; on Sun, 10 May 2026 11:36:14 GMT]]></title><description><![CDATA[<p><span><a href="/user/mistheart%40masto.es">@<span>mistheart</span></a></span> Mmmm dice si da problemas si el pograma se actualiza solo?</p>]]></description><link>https://board.circlewithadot.net/post/https://neopaquita.es/users/Chacheneguer/statuses/116550072701665866</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://neopaquita.es/users/Chacheneguer/statuses/116550072701665866</guid><dc:creator><![CDATA[chacheneguer@neopaquita.es]]></dc:creator><pubDate>Sun, 10 May 2026 11:36:14 GMT</pubDate></item><item><title><![CDATA[Reply to https:&#x2F;&#x2F;www.bleepingcomputer.com&#x2F;news&#x2F;security&#x2F;jdownloader-site-hacked-to-replace-installers-with-python-rat-malware&#x2F; on Sun, 10 May 2026 11:35:27 GMT]]></title><description><![CDATA[<p><span><a href="/user/mistheart%40masto.es">@<span>mistheart</span></a></span> Gracias por el aviso, yo lo tenía(lo he desinstalado aunque creo que no era la misma versión, pero he visto un archivo .py no reconocido en mis descargas y al darle a propiedades, ponía 9gb)</p>]]></description><link>https://board.circlewithadot.net/post/https://masto.es/users/hypnoticside94/statuses/116550069590313588</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://masto.es/users/hypnoticside94/statuses/116550069590313588</guid><dc:creator><![CDATA[hypnoticside94@masto.es]]></dc:creator><pubDate>Sun, 10 May 2026 11:35:27 GMT</pubDate></item><item><title><![CDATA[Reply to https:&#x2F;&#x2F;www.bleepingcomputer.com&#x2F;news&#x2F;security&#x2F;jdownloader-site-hacked-to-replace-installers-with-python-rat-malware&#x2F; on Sun, 10 May 2026 11:15:43 GMT]]></title><description><![CDATA[<p>Solo hay riesgo si se descargó JDownloader mientras su web estuvo comprometida, si lo teníais de antes no deberíais tener riesgo ninguno.</p><p>Aparte, los analistas dicen que la versión comprometida permite colarse un malware que mete un ofuscado RAT en Python, pero que han sacado unos IOCs.</p><p>De todos modos, fijaos en las propiedades del ejecutable descargado. Si la firma digital NO es de 'AppWork GmbH' entonces borrad el ejecutable, extirpad los sectores de disco donde estaban, dadselo de comer a los perros y quemad sus heces xD</p>

<div class="row mt-3"><div class="col-12 mt-3"><img class="img-thumbnail" src="https://masto.es/system/media_attachments/files/116/549/980/758/476/451/original/1c10c631fb063479.png" alt="Link Preview Image" /></div></div>]]></description><link>https://board.circlewithadot.net/post/https://masto.es/users/mistheart/statuses/116549992038643920</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://masto.es/users/mistheart/statuses/116549992038643920</guid><dc:creator><![CDATA[mistheart@masto.es]]></dc:creator><pubDate>Sun, 10 May 2026 11:15:43 GMT</pubDate></item><item><title><![CDATA[Reply to https:&#x2F;&#x2F;www.bleepingcomputer.com&#x2F;news&#x2F;security&#x2F;jdownloader-site-hacked-to-replace-installers-with-python-rat-malware&#x2F; on Sun, 10 May 2026 11:13:33 GMT]]></title><description><![CDATA[<p><span><a href="/user/mistheart%40masto.es">@<span>mistheart</span></a></span></p>

<div class="row mt-3"><div class="col-12 mt-3"><img class="img-thumbnail" src="https://mastodon.bofhers.es/system/media_attachments/files/116/549/977/715/104/618/original/6374b9d46449c6a8.jpg" alt="Link Preview Image" /></div></div>]]></description><link>https://board.circlewithadot.net/post/https://mastodon.bofhers.es/users/dgarciad/statuses/116549983517785717</link><guid isPermaLink="true">https://board.circlewithadot.net/post/https://mastodon.bofhers.es/users/dgarciad/statuses/116549983517785717</guid><dc:creator><![CDATA[dgarciad@mastodon.bofhers.es]]></dc:creator><pubDate>Sun, 10 May 2026 11:13:33 GMT</pubDate></item></channel></rss>