CERT24JDownloader website installers replaced with Python RAT malware
The JDownloader website was compromised, and between May 6 and May 7, 2026, the Windows alternative installer and Linux shell installer download links were redirected to malicious files. The Windows installer distributed a Python-based remote access trojan. Users were at risk if they downloaded and executed an affected installer.