Signal

Hackers use PyInstaller to hide XWorm malware

Evidence first: scan the strongest sources, then decide whether to go deeper.

Published 2026-05-15 12:45 UTCUpdated 2026-05-15 21:48 UTC
rss
malwarebytes_threat_analysis
Source links open
Source links and full evidence are open here. Archive history, compare-over-time, alerts, exports, API, integrations, and workflow are paid.
No card needed for the free brief.
Evidence trail (top sources)
top sources (2 domains)domains are deduped. counts indicate coverage, not truth.
2 top sources shown
Hackers use PyInstaller to hide XWorm malware
SC Media · News · scworld.com · 2026-05-15 21:48 UTC
Attackers replaced JDownloader installer downloads with malware
Malwarebytes Threat Analysis · News · malwarebytes.com · 2026-05-15 12:45 UTC
limited source diversity in top sources
Overview

Coverage centers on: Hackers use PyInstaller to hide XWorm malware.

Score total
0.81
Momentum 24h
2
Posts
2
Origins
2
Source types
1
Duplicate ratio
0%
All evidence
All evidence
Hackers use PyInstaller to hide XWorm malware
SC Media · scworld.com · 2026-05-15 21:48 UTC
Attackers replaced JDownloader installer downloads with malware
Malwarebytes Threat Analysis · malwarebytes.com · 2026-05-15 12:45 UTC
Show filters & breakdown
Posts loaded: 0Publishers: 2Origin domains: 2Duplicates: -
Showing 2 / 0
Top publishers (this list)
  • SC Media (1)
  • Malwarebytes Threat Analysis (1)
Top origin domains (this list)
  • scworld.com (1)
  • malwarebytes.com (1)