← Back to Feed
Inside the JDownloader Supply-Chain Attack: An r77 Rootkit Bot That Kills Your Antivirus
May 11, 2026 · Gen Digital · Severity: HIGH
Malware that hid itself on infected systems and disabled antivirus protection.
Key Takeaways
- Gen Digital analyzed the JDownloader supply-chain attack, which delivered an r77 rootkit bot that hid itself on infected systems.
- The r77 rootkit bot disabled antivirus protection on victim machines to maintain persistence and avoid detection during the JDownloader attack.
- Users should verify downloads of popular tools like JDownloader, since supply chain attacks weaponize trusted software to deploy rootkits.