Skip to main content

lemmy - Link to source

Fake 7-Zip downloads are turning home PCs into proxy nodes

Fake 7-Zip downloads are turning home PCs into proxy nodes | Malwarebytes

A convincing lookalike of the popular 7-Zip archiver site has been silently turning victims’ machines into residential proxy nodes.
Stefan Dasic (Malwarebytes)
#security
in reply to Zerush

WagnasT
piefed - Link to source
WagnasT
• •
So the threat actors squatted on a similar domain name and sent malicious 7zip installers. namecheap is the registrar for the offending domain, abuse@namecheap.com is the appropriate place to report this crap.
in reply to Zerush

onlooker
lemmy - Link to source
onlooker
• •
Following a YouTube tutorial for a new build, they were instructed to download 7‑Zip from 7zip[.]com, unaware that the legitimate project is hosted exclusively at 7-zip.org.


My heart goes out to the poor, unsuspecting new PC owner and at the same time: fuck YouTube tutorials. It's basically Russian roulette: either the information is solid or you get shit like this. YouTube doesn't vet videos, nor does it have any interest in doing so, unless profits are somehow involved.

in reply to Zerush

Sphere [he/him, they/them]
lemmy - Link to source
Sphere [he/him, they/them]
• •
This is why ninite.com is and will always be the correct way to install basic software on a fresh PC
in reply to Sphere [he/him, they/them]

Luffy
lemmy - Link to source
Luffy
• •
Correction: your central repository (or winget if you're a win snob
in reply to Luffy

Sphere [he/him, they/them]
lemmy - Link to source
Sphere [he/him, they/them]
• •
Yes, go ahead and keep telling ordinary people to use a terminal, I'm sure they'll come around any day now...
in reply to Sphere [he/him, they/them]

Zerush
lemmy - Link to source
Zerush
• •
I never download apps from other than the official homepage or from sites linked from these. This case is by download 7-Zip from a fake homepage, not from the real one. This can happen when you use a third party download page, even if Ninite is normally a trustworth site.
⇧