Back Cybersecuritynews

Hackers Compromised ILSpy WordPress Domain to Deliver Malware

Cybersecuritynews •Abinaya • April 6, 2026

A new supply chain attack targeting developers after threat actors compromised the official WordPress domain for ILSpy on April 6, 2026. Instead of providing the legitimate software, the hijacked website began redirecting visitors to a malicious webpage to deliver malware. Normally, clicking the download button on the ILSpy website sends users directly to the project’s […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ILSpy WordPress Domain Breached to Distribute Malware On April 6, 2026, hackers compromised the official WordPress domain for ILSpy, a widely used open-source tool for .NET code analysis. The breach redirected users from the legitimate site to a malicious webpage designed to deliver malware. This supply chain attack specifically targets software developers who rely on ILSpy for their projects. The incident was confirmed by the Redirection Attack Cybersecurity research group vx-underground, which provided evidence of the breach. Users attempting to download ILSpy software were instead exposed to potential malware infections. The scope of the attack affects all visitors to the compromised site. As of now, the situation is ongoing, and users are advised to avoid the site until further notice. 3 sources 66

Extracted Entities

Hackers Compromised ILSpy WordPress Domain to Deliver Malware

The full story

Extracted Entities

Attack Types (1)

Companies (1)

MITRE ATT&CK (1)

Platforms (1)