eScan Antivirus Update Server Hacked to Push Malicious Update packages

Cybersecuritynews •Guru Baran • January 29, 2026

A critical supply chain compromise affecting MicroWorld Technologies’ eScan antivirus product, wherein threat actors successfully hijacked the vendor’s legitimate update infrastructure to distribute malware. Discovered on January 20, 2026, by Morphisec, the attack utilized a trojanized update package to deploy multi-stage malware across enterprise and consumer endpoints globally. The incident renders the antivirus software ineffective […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

eScan Antivirus Supply Chain Compromise Distributes Malware On January 20, 2026, a supply chain compromise of MicroWorld Technologies' eScan antivirus was identified, allowing malicious updates to be delivered through its legitimate update infrastructure. This incident resulted in the global distribution of multi-stage malware to both enterprise and consumer endpoints, with the malicious packages reportedly digitally signed using a compromised eScan certificate. 11 sources 53

eScan Antivirus Update Server Hacked to Push Malicious Update packages

The full story

Extracted Entities

Attack Types (3)

Companies (1)