Skip to content
  • Hjem
  • Seneste
  • Etiketter
  • Populære
  • Verden
  • Bruger
  • Grupper
Temaer
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Kollaps
FARVEL BIG TECH
  1. Forside
  2. Ikke-kategoriseret
  3. Not sure who needs to know this, but if you download and install the Windows version of Rufus, the free software for writing ISO images to USB/CD-ROM, your PC will end up with about 100 trojans.

Not sure who needs to know this, but if you download and install the Windows version of Rufus, the free software for writing ISO images to USB/CD-ROM, your PC will end up with about 100 trojans.

Planlagt Fastgjort Låst Flyttet Ikke-kategoriseret
162 Indlæg 92 Posters 0 Visninger
  • Ældste til nyeste
  • Nyeste til ældste
  • Most Votes
Svar
  • Svar som emne
Login for at svare
Denne tråd er blevet slettet. Kun brugere med emne behandlings privilegier kan se den.
  • briankrebs@infosec.exchangeB briankrebs@infosec.exchange

    A kind reader submitted the Rufus installer to any.run, a sandbox which walks through the installation of software to find malware that gets installed only *AFTER* the executable is clicked. You can see exactly all of the post-install prompts to download additional software that I also saw.

    https://infosec.exchange/@jordinki/117492425049116266

    gunstick@mastodon.opencloud.luG This user is from outside of this forum
    gunstick@mastodon.opencloud.luG This user is from outside of this forum
    gunstick@mastodon.opencloud.lu
    wrote sidst redigeret af
    #161

    @briankrebs funny that it is possible to send the rufus installer to analysis when the rufus folks claim it has no installer.
    The reality distortion field is strong here.

    1 Reply Last reply
    0
    • centuryavocado@know.me.ukC centuryavocado@know.me.uk

      @rx13 @briankrebs this. I struggled to find the news article about it but yep, ad space being bought on common tools searches which show the correct website in the URL slot next to the result but take you to the non genuine page.

      rx13@infosec.exchangeR This user is from outside of this forum
      rx13@infosec.exchangeR This user is from outside of this forum
      rx13@infosec.exchange
      wrote sidst redigeret af
      #162

      @CenturyAvocado
      @briankrebs
      Does seem to be quite a lot of look alike domains in the last week, so this is my best guess on your experience

      https://urlscan.io/search/#domain.keyword%3A*rufus*

      1 Reply Last reply
      0
      • jwcph@helvede.netJ jwcph@helvede.net shared this topic
      Svar
      • Svar som emne
      Login for at svare
      • Ældste til nyeste
      • Nyeste til ældste
      • Most Votes


      • Log ind

      • Login or register to search.
      Powered by NodeBB Contributors
      Graciously hosted by data.coop
      • First post
        Last post
      0
      • Hjem
      • Seneste
      • Etiketter
      • Populære
      • Verden
      • Bruger
      • Grupper