Attackers replaced JDownloader installer downloads with malware