Good idea to remember not to click zips or exes if you're expecting a torrent file.

Luckily this malware was relatively benign, changing bitcoin addresses to malicious ones in the clipboard, so if you don't use crypto then you're fine against this attack. No one's funds have made it into the attacker's wallet yet.

Quite a bad compromise of Xubuntu's and Canonical's security and also embarrassing.

They're being a bit vague and dismissive of the hack at the moment, as far as I can see there is now only the 24.04 version linked on the downloads page (not even sure the download link works). The recent 25.10 release (released 10th Oct) is no longer visible and the blog posts visible talk about testing for 21.04 (posts from 2021).

So presumably they've reverted to an archived version of their site while they investigate?

Is there a link that isn't a fucking video?