Watering Hole Attack Compromises EmEditor Installer to Distribute Malware
First seen 23 Jan 2026, 22:10 UTC
•


•91% similarity
•25.7
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
In late December 2025, EmEditor, a widely used text and code editor, reported that its download page had been compromised. This incident involved a watering hole attack that aimed to distribute multistage malware through a malicious installer. Users of EmEditor are at risk of having their information stolen due to this security breach.
ThreatCluster AI