← Back to Feed
Inside the JDownloader Supply-Chain Attack: An r77 Rootkit Bot That Kills Your Antivirus
May 11, 2026 · Gen Digital · Severity: HIGH
Malware that hid itself on infected systems and disabled antivirus protection.
Key Takeaways
- Gen Digital analyzed the JDownloader supply-chain attack delivering an r77 rootkit bot that hides on infected systems.
- The r77 rootkit malware disabled antivirus protection on affected machines to maintain its foothold after the JDownloader compromise.
- Users of JDownloader should verify the integrity of their installations, as the supply chain attack shipped a destructive rootkit.