Install the app
How to install the app on iOS

Follow along with the video below to see how to install our site as a web app on your home screen.

Note: This feature may not be available in some browsers.

  • You can use [base64] and [hide64] BBCode to automatically convert your string into Base64. The [base64] tag will give you the encoded string, while the [hide64] tag will conceal your post but will still reveal the Base64 encoded message when unhidden.
    The raw text is only available to you, and it will help you to edit your post faster.

MMD discussion and sharing

More information:
https://www.reddit.com/r/jdownloader/comments/1t6goqe/is_the_website_hacked
Markdown (GitHub flavored): 
Update 6:(21:18 - 07.05.2026) When?

Website with the alternative installers has been compromised on Wed May 06 2026 00:01:09 GMT+0000

Before that, the attacker did experiment on another dummy site on Tue May 05 2026 23:55:37 GMT+0000

Update 7:(22:03 -07.05.2026) As there has been question about 3rd party docker images. some docker images pull JDownloader.jar from different infra, not affected. Only website has been compromised.

Update 8:(23:09 -07.05.2026) Comparision/Diff of all files with offsite(rsnapshot in pull mode) backup has shown that only the two sites mentioned in update 6 have been edited/compromised.

The attack was about editing the website and replacing the alternative installer links with compromised ones, smartscreen does warn about execution of them due to missing digital signature.

> Between May 06 - May 07.
 
Lol! So many people recommended that downloader, butI refused to use that stuff purely off of a gut feeling! I'm never doubting myself again
Kam08 said:
Warning! JDownloader was hacked dont download jdownloader in Windows and Linux
https://twitter.com/x/status/2052479496222081403
Click to expand...
Checkmate said:
More information:
https://www.reddit.com/r/jdownloader/comments/1t6goqe/is_the_website_hacked
Markdown (GitHub flavored): 
Update 6:(21:18 - 07.05.2026) When?

Website with the alternative installers has been compromised on Wed May 06 2026 00:01:09 GMT+0000

Before that, the attacker did experiment on another dummy site on Tue May 05 2026 23:55:37 GMT+0000

Update 7:(22:03 -07.05.2026) As there has been question about 3rd party docker images. some docker images pull JDownloader.jar from different infra, not affected. Only website has been compromised.

Update 8:(23:09 -07.05.2026) Comparision/Diff of all files with offsite(rsnapshot in pull mode) backup has shown that only the two sites mentioned in update 6 have been edited/compromised.

The attack was about editing the website and replacing the alternative installer links with compromised ones, smartscreen does warn about execution of them due to missing digital signature.
Click to expand...
 
  • Like
  • Haha
Reactions: who∞, qq3532417, westher and 2 others
Fuushi said:
Lol! So many people recommended that downloader, butI refused to use that stuff purely off of a gut feeling! I'm never doubting myself again
Click to expand...
To be honest, any software can be vulnerable to hostile defacements like this, so your intuition is unrelated. In fact, Notepad++ was infected back then, and recently, DaemonTools Lite, a popular ISO emulator, also fell victim to the same attack vector. The point is that Jdownloader main developer had nothing to do with the malicious delivery.

I'd still recommend JDownloader regardless. Note that the setup files signature was invalid, that would have given the red flag.

Not too sure if this is related to the cpanel bug that was recently discovered.
 
  • Like
  • Haha
Reactions: SuperFerdzio, qq3532417, KronosXiii and 10 others
Checkmate said:
To be honest, any software can be vulnerable to hostile defacements like this, so your intuition is unrelated. In fact, Notepad++ was infected back then, and recently, DaemonTools Lite, a popular ISO emulator, also fell victim to the same attack vector.

I'd still recommend JDownloader regardless. Note that the setup files signature was invalid, that would have given the red flag.

Not too sure if this is related to the cpanel bug that was recently discovered.
Click to expand...
Must you rain on my parade with your damn logic

disappointed-cmon.gif
 
  • Like
  • Haha
  • Sad
Reactions: SuperFerdzio, unko_sammy, qq3532417 and 5 others
Tymx0429 said:
I suddenly realized that the K website seems to have had no new content for a long time:cry:
any similar sites？
Click to expand...
Well even if it exist it wont be shared in public for sure cuz most of people here still dont get that K site was a pirate site, and most of the folks just openly wrote about it.
Basically people talked about it all over the place most of the time not hiding anything, most of the authors know about it from google search (again because people openly talked about it) or from second hand information.
Point is you can share stuff but sharing the information where you got it is most of the time bad news for all of us, and until people learn that i can bet most of the sites like that will be kept secret.
I repeat K site is a pirate site, so if you want some author works which isnt shared here, i can bet your only option is to ask really polite for uploaders to get it for you or just go to the authors page (Fantia, Patreon, Dlsite...) and simply buy it yourself.
World of online surfing is huge so you can start to learn how to be smart and creative.
 
  • Like
Reactions: ArifAkhrullah, jose0hentai, westher and 5 others
I'm guessing the Jdownloader issue isn't a problem for those that have downloaded the program long ago right? Would a recent update from the program itself make the program vulnerable to this or is it just the download from the site that is infected?
 
NepuNepu said:
I'm guessing the Jdownloader issue isn't a problem for those that have downloaded the program long ago right? Would a recent update from the program itself make the program vulnerable to this or is it just the download from the site that is infected?
Click to expand...
It's a problem if you download it between May 6 and May 7, and that you also ignored the security screen from Windows blocking it. Thank god someone spot it early, so the blast radius are small enough
 
Last edited:
  • Like
Reactions: samwisep, westher, MARKSAIN and 1 other person
zzpai 202012-202503 Collection [FHD-60fps-13Mbps]
Please / Kindly Support The Creator:
https://www.patreon.com/zzpai
-
You must give the following reaction to unlock: Like Love Haha Wow
-
If Hotlink protection enabled, use this to bypass it:
https://chromewebstore.google.com/d...er-for/mpbjkejclgfgadiemmefgebjfooflfhl?hl=en
-
For Other Collection Visit : https://www.anime-sharing.com/members/nasa123.319097/#recent-content
-
Im not a collectionist. i convert, compress, encode video to friendly size and share it. So sometimes my post will missing some video. =D
-
 
Last edited:
  • Like
  • Love
  • Wow
Reactions: thecah, kkoo, fuyupori and 1,211 others
l9538168 said:
thanks god I didn't open it in may 6
Click to expand...
It only concerns new installation of JDownloader. If you had JDownloader installed well before May 6, you're unaffected.

What happened is that the hacker hacked into JDownloader.org (the website) and switch the downloadable installation file with infected file.

This type of attacked happen at every major software, including Linux (the infamous XZ library), Password Manager (most recently, Bitwarden CLI binary was switcheroo), the list is long.

As for the DLC File, the Anime-Sharing only generates DLC from the links that Uploader supplied, on our premise, we have no business with JDownloader.
 
Last edited:
  • Like
Reactions: SuperFerdzio, westher and MARKSAIN
Checkmate said:
It only concerns new installation of JDownloader. If you had JDownloader installed well before May 6, you're unaffected.

What happened is that the hacker hacked into JDownloader.com (the website) and switch the downloadable installation file with infected file.

This type of attacked happen at every major software, including Linux (the infamous XZ library), Password Manager (most recently, Bitwarden CLI binary was switcheroo), the list is long.

As for the DLC File, the Anime-Sharing only generates DLC from the links that Uploader supplied, on our premise, we have no business with JDownloader.
Click to expand...
I would also like to add that the update pipeline built into the software is secure and has not been breached. If you installed Jdownloader2 before may 6, any updated pushed through the software it self has not been compromised. HOWEVER, update pipelines like winget, choco, etc have not been confirmed to be safe. Please refrain from using any .exe installer for jdownloader before everything clears up.

The attack vector has been found and patched already. If you have been affected, these items are what is now on your pc.
VirusTotal:
Bkav Pro, Gridinsoft, Rising, McAfee Scanner and Rising marked it as Trojan
it changes Windows Management settings, changes the system owner, creates parallell processes to execute code, steals web session cookies, hijacks execution flows to fetch credentials, disable defense systems like firewall and antivirus

Best practice. Is to lock down all your banking, credit cards, accounts, and Change all financial related passwords using an unaffected device. Wipe the operating system and do a fresh install.
 
  • Like
  • Wow
Reactions: westher, AFratrem, MARKSAIN and 4 others
KuzashiX said:
Best practice. Is to lock down all your banking, credit cards, accounts, and Change all financial related passwords using an unaffected device. Wipe the operating system and do a fresh install.
Click to expand...

But only if you actually download and install JDownloader between May 06 and May 07.

If you had installed it last week and just simply launch it or use it between these date, you're safe.
 
  • Like
Reactions: MARKSAIN
Checkmate said:
To be honest, any software can be vulnerable to hostile defacements like this, so your intuition is unrelated. In fact, Notepad++ was infected back then, and recently, DaemonTools Lite, a popular ISO emulator, also fell victim to the same attack vector. The point is that Jdownloader main developer had nothing to do with the malicious delivery.

I'd still recommend JDownloader regardless. Note that the setup files signature was invalid, that would have given the red flag.

Not too sure if this is related to the cpanel bug that was recently discovered.
Click to expand...
and last 2 week they hacked HWinfo too, we can see new patterns here where, hacker starts attacking these tools website to gain quicker access on people computer, and its sucks because you dont know which or whom website would be next, and it will be under the radar until someone discover it first....
 
  • Like
Reactions: chigent, westher, AFratrem and 1 other person
ppanda said:
and last 2 week they hacked HWinfo too, we can see new patterns here where, hacker starts attacking these tools website to gain quicker access on people computer, and its sucks because you dont know which or whom website would be next, and it will be under the radar until someone discover it first....
Click to expand...

I've seen pattern that they are also probing Anime-Sharing. The only reason I'm safe because we mostly made all of our stuff in-house to bring cost down to the bottom. It's like picking a lock without knowing the lock layout. It's harder though, not impossible.

Anime-Sharing holds a clean record since its inception and I'm not giving up that easily. I'm not here to challenge any hacker though, please spare us poor plebs, we are just peasants and is running a poor charity.
 
  • Like
  • Love
  • Haha
Reactions: qq3532417, 3canofballsaweek, oaklash and 22 others
lanzfh Collection [not my upload]
Please / Kindly Support The Creator:
https://lanzfh.fanbox.cc/
https://payhip.com/lanzfh
https://app.unifans.io/c/lanzfh

You must give the following reaction to unlock: Like Love Haha Wow
-
If Hotlink protection enabled, use this to bypass it:
https://chromewebstore.google.com/d...er-for/mpbjkejclgfgadiemmefgebjfooflfhl?hl=en
-
For Other Collection Visit : https://www.anime-sharing.com/members/nasa123.319097/#recent-content
-
Im not a collectionist. i convert, compress, encode video to friendly size and share it. So sometimes my post will missing some video. =D
-
 
Last edited:
  • Like
  • Love
  • Haha
Reactions: Logical Zoner, Botaktaktak, the69ggetblind and 1,237 others
You must log in or register to reply here.
Top Bottom
Back