eScan Antivirus Update Server Breached to Deliver Malicious Software Updates

Gbhackers •Divya • January 29, 2026

MicroWorld Technologies’ eScan antivirus platform fell victim to a sophisticated supply chain attack on January 20, 2026, when threat actors compromised legitimate update infrastructure to distribute multi-stage malware to enterprise and consumer endpoints worldwide. Security researchers immediately alerted the vendor, which isolated the affected infrastructure within one hour and took its global update system offline […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

eScan Antivirus Supply Chain Compromise Distributes Malware On January 20, 2026, a supply chain compromise of MicroWorld Technologies' eScan antivirus was identified, allowing malicious updates to be delivered through its legitimate update infrastructure. This incident resulted in the global distribution of multi-stage malware to both enterprise and consumer endpoints, with the malicious packages reportedly digitally signed using a compromised eScan certificate. 11 sources 53

eScan Antivirus Update Server Breached to Deliver Malicious Software Updates

The full story

Extracted Entities

Attack Types (1)

Companies (1)