Xubuntu Website Hacked to Spread Malware
The official Xubuntu website was compromised by attackers who offered a dangerous ZIP file disguised as an OS download.
The file delivered Windows malware designed to steal cryptocurrency and modify clipboard data.
- The regular .torrent file was replaced with a ZIP archive named xubuntu-safe-download.zip.
- The archive contained a Windows executable (TestCompany.SafeDownloader.exe) and a file labeled "Copyright (c) 2026 Xubuntu.org."
The ZIP file includes an EXE that runs a fake downloader interface and drops a clipboard hijacker. Do NOT run it.
Users on Reddit's r/Xubuntu community were the first to raise the alarm.
Author's summary: Xubuntu website hacked to spread malware.