EmEditor Editor Website Hacked to Deliver Infostealer Malware in Supply Chain Attack

EmEditor Website Breach Turns Trusted Installer Into Infostealer Malware

A supply chain attack targeting the official EmEditor website quietly exposed users to infostealer malware after attackers tampered with the software’s download mechanism.  For four days in December 2025, users who downloaded EmEditor from its official site unknowingly installed a trojanized version of the editor. This poses “… a large-scale potential threat to related government and enterprise institutions,” said Qianxin researchers. Inside the…

EmEditor Website Breach Used To Spread Infostealer Malware - Cybernoz - Cybersecurity News

The popular text editor EmEditor fell victim to a sophisticated supply chain attack between December 19-22, 2025, in which attackers compromised the official website to distribute malware-laced installation packages. Emurasoft, Inc., the software’s developer, confirmed on December 23 that malicious MSI installers were served to users through tampered download links, bearing fraudulent digital signatures from “WALSHAM INVESTMENTS LIMITED” instead…

EmEditor Website Breach Used to Spread Infostealer Malware

The popular text editor EmEditor fell victim to a sophisticated supply chain attack between December 19-22, 2025, in which attackers compromised the official website to distribute malware-laced installation packages. Emurasoft, Inc., the software’s developer, confirmed on December 23 that malicious MSI installers were served to users through tampered download links, bearing fraudulent digital signatures from […] The post EmEditor Website Breach …