eScan Antivirus Supply Chain Compromise Distributes Malware

On January 20, 2026, a supply chain compromise of MicroWorld Technologies' eScan antivirus was identified, allowing malicious updates to be delivered through its legitimate update infrastructure. This incident resulted in the global distribution of multi-stage malware to both enterprise and consumer endpoints, with the malicious packages reportedly digitally signed using a compromised eScan certificate.