Infostealer Malware Delivered in EmEditor Supply Chain Attack

Back Securityweek

Infostealer Malware Delivered in EmEditor Supply Chain Attack

Securityweek • December 29, 2025

Share: View original

The text and code editing tool EmEditor was targeted in a supply chain attack that resulted in the distribution of infostealer malware.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

EmEditor Supply Chain Attack Distributes Infostealer Malware EmEditor, a text and code editing tool, was compromised in a supply chain attack that led to the distribution of infostealer malware. The malicious installer was delivered through the official EmEditor website's download button, affecting users who downloaded the software during the attack. 4 sources 67

Extracted Entities

Attack Types (2)

Malware Supply Chain Attack

Platforms (1)