Not sure who needs to know this, but if you download and install the Windows version of Rufus, the free software for writing ISO images to USB/CD-ROM, your PC will end up with about 100 trojans.
-
Not sure who needs to know this, but if you download and install the Windows version of Rufus, the free software for writing ISO images to USB/CD-ROM, your PC will end up with about 100 trojans.
Edit: The site I downloaded from was rufus[.]ie which is apparently the official site. During installation, the software threw up a couple of rather verbose messages saying it needed to download additional components.
No clue whether the resulting ISO is also malicious, but tried running it just for giggles on a spare Windows PC from bootup and the machine's bios said nope, wouldn't allow b/c security policy. Not sure if it's related but I've never seen that message before trying to boot up from a USB.
-
@briankrebs How many trojans?
@demon6 IDK. I stopped counting at some point. It just kept downloading shit.
-
Not sure who needs to know this, but if you download and install the Windows version of Rufus, the free software for writing ISO images to USB/CD-ROM, your PC will end up with about 100 trojans.
Edit: The site I downloaded from was rufus[.]ie which is apparently the official site. During installation, the software threw up a couple of rather verbose messages saying it needed to download additional components.
@briankrebs Ventoy is the new Rufus BTW.
-
@demon6 IDK. I stopped counting at some point. It just kept downloading shit.
-
Not sure who needs to know this, but if you download and install the Windows version of Rufus, the free software for writing ISO images to USB/CD-ROM, your PC will end up with about 100 trojans.
Edit: The site I downloaded from was rufus[.]ie which is apparently the official site. During installation, the software threw up a couple of rather verbose messages saying it needed to download additional components.
@briankrebs The official one downloaded via https://github.com/pbatard/rufus or https://rufus.ie? 🤨
-
@briankrebs The official one downloaded via https://github.com/pbatard/rufus or https://rufus.ie? 🤨
@sindarina ah that's my problem I guess.
-
Not sure who needs to know this, but if you download and install the Windows version of Rufus, the free software for writing ISO images to USB/CD-ROM, your PC will end up with about 100 trojans.
Edit: The site I downloaded from was rufus[.]ie which is apparently the official site. During installation, the software threw up a couple of rather verbose messages saying it needed to download additional components.
@briankrebs eh?
-
@sindarina ah that's my problem I guess.
@briankrebs I bookmarked it a while back because the search results were always such a crapshoot
-
Not sure who needs to know this, but if you download and install the Windows version of Rufus, the free software for writing ISO images to USB/CD-ROM, your PC will end up with about 100 trojans.
Edit: The site I downloaded from was rufus[.]ie which is apparently the official site. During installation, the software threw up a couple of rather verbose messages saying it needed to download additional components.
@briankrebs I used the Portable one when I ran Windows. Is it just the installer, or is the portable one infected, too?
-
@briankrebs Ventoy is the new Rufus BTW.
@dey @briankrebs +1 on Ventoy if you need to create USB media on a regular basis, such a great tool to have.
-
No clue whether the resulting ISO is also malicious, but tried running it just for giggles on a spare Windows PC from bootup and the machine's bios said nope, wouldn't allow b/c security policy. Not sure if it's related but I've never seen that message before trying to boot up from a USB.
@briankrebs extremely rare secure boot W?
-
Not sure who needs to know this, but if you download and install the Windows version of Rufus, the free software for writing ISO images to USB/CD-ROM, your PC will end up with about 100 trojans.
Edit: The site I downloaded from was rufus[.]ie which is apparently the official site. During installation, the software threw up a couple of rather verbose messages saying it needed to download additional components.
However, in my defense Google's default search results list rufus[.]ie as the authoritative site
-
@briankrebs The official one downloaded via https://github.com/pbatard/rufus or https://rufus.ie? 🤨
@sindarina @briankrebs did you notice that the GitHub repo links to rufus.ie?
-
Not sure who needs to know this, but if you download and install the Windows version of Rufus, the free software for writing ISO images to USB/CD-ROM, your PC will end up with about 100 trojans.
Edit: The site I downloaded from was rufus[.]ie which is apparently the official site. During installation, the software threw up a couple of rather verbose messages saying it needed to download additional components.
@briankrebs
What chance do I have, if you get hit? -
Not sure who needs to know this, but if you download and install the Windows version of Rufus, the free software for writing ISO images to USB/CD-ROM, your PC will end up with about 100 trojans.
Edit: The site I downloaded from was rufus[.]ie which is apparently the official site. During installation, the software threw up a couple of rather verbose messages saying it needed to download additional components.
@briankrebs woopsiedoodle
-
@briankrebs I bookmarked it a while back because the search results were always such a crapshoot
@briankrebs ‘rufus.ie’ IS the official website, by the way, linked from the GitHub and such. Did that get compromised?
-
Not sure who needs to know this, but if you download and install the Windows version of Rufus, the free software for writing ISO images to USB/CD-ROM, your PC will end up with about 100 trojans.
Edit: The site I downloaded from was rufus[.]ie which is apparently the official site. During installation, the software threw up a couple of rather verbose messages saying it needed to download additional components.
looks disputed as a windows defender false positive.
-
Not sure who needs to know this, but if you download and install the Windows version of Rufus, the free software for writing ISO images to USB/CD-ROM, your PC will end up with about 100 trojans.
Edit: The site I downloaded from was rufus[.]ie which is apparently the official site. During installation, the software threw up a couple of rather verbose messages saying it needed to download additional components.
@briankrebs huh, that is the traditional official domain for it, isn't it?
-
@sindarina @briankrebs did you notice that the GitHub repo links to rufus.ie?
@ajn142 @briankrebs Yeah, it is the official website? Or used to be, at least?
-
However, in my defense Google's default search results list rufus[.]ie as the authoritative site
@briankrebs the link the to official site from the GitHub page also links to Rufus.ie so something ain’t right
