Xubuntu confirms a malicious ZIP was served in October and is switching to the Hugo static site generator to prevent similar attacks.

The Xubuntu team has shared an incident report on its October website breach. Attackers brute-forced the site to inject malware - but was anything else affected?

You're reading Xubuntu Reveals How its Website Was Hijacked, a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.

A Reddit user reports that Xubuntu.org may have been compromised, serving a ZIP file containing a Trojan instead of the real installer.

The official Xubuntu website briefly served Windows malware to users trying to download the distro between 18-19 October. ISOs were not affected.

You're reading Xubuntu Website Hijack Served Malware Downloads (Now Fixed), a blog post from OMG! Ubuntu. Do not reproduce elsewhere without permission.