Tag latest blog post

This commit is contained in:
str4d
2014-02-17 21:37:59 +00:00
parent ebc3133e3a
commit 3bf37500b8

View File

@@ -1,31 +1,40 @@
{% trans -%}
========================= =========================
Malware at i2pbrowser.net Malware at i2pbrowser.net
========================= =========================
{%- endtrans %}
.. meta:: .. meta::
:date: 2014-02-16 :date: 2014-02-16
:excerpt: The site i2pbrowser.net is a fake I2P website mirror serving up malware for Windows. :excerpt: {% trans %}The site i2pbrowser.net is a fake I2P website mirror serving up malware for Windows.{% endtrans %}
{% trans -%}
We have recently been made aware of the existence of i2pbrowser.net. This We have recently been made aware of the existence of i2pbrowser.net. This
website copies our homepage and download page, and attempts to trick users into website copies our homepage and download page, and attempts to trick users into
downloading Windows malware. downloading Windows malware.
{%- endtrans %}
{% trans -%}
There are several indicators that point to i2pbrowser.net being a malware site: There are several indicators that point to i2pbrowser.net being a malware site:
{%- endtrans %}
- The domain was registered on February 10th, 2014. - {% trans %}The domain was registered on February 10th, 2014.{% endtrans %}
- The download URLs for Windows, Mac OSX, Linux, Android etc. all link to the - {% trans %}The download URLs for Windows, Mac OSX, Linux, Android etc. all link to the same .exe file.{% endtrans %}
same .exe file. - {% trans %}The .exe is only 741 KB; the official Windows installer for I2P is 13 MB.{% endtrans %}
- The .exe is only 741 KB; the official Windows installer for I2P is 13 MB.
{% trans -%}
We have not examined the malware ourselves, but it does not appear to be very We have not examined the malware ourselves, but it does not appear to be very
sophisticated; it is not integrated into or bundled with the I2P software. sophisticated; it is not integrated into or bundled with the I2P software.
Information security expert `Lance James`_ posted `a tweet`_ labelling it as Information security expert `Lance James`_ posted `a tweet`_ labelling it as
"a standard dark comet rat". "a standard dark comet rat".
{%- endtrans %}
{% trans -%}
Spread the word. The only offical download locations for I2P are linked on our Spread the word. The only offical download locations for I2P are linked on our
`download page`_. All I2P download packages are GPG-signed by the `download page`_. All I2P download packages are GPG-signed by the
`release signing key`_. `release signing key`_.
{%- endtrans %}
.. _`Lance James`: https://twitter.com/lancejssc .. _`Lance James`: https://twitter.com/lancejssc
.. _`a tweet`: https://twitter.com/lancejssc/status/434768667310821377 .. _{% trans %}`a tweet`{% endtrans %}: https://twitter.com/lancejssc/status/434768667310821377
.. _`download page`: {{ get_url('downloads_list') }} .. _{% trans %}`download page`{% endtrans %}: {{ get_url('downloads_list') }}
.. _`release signing key`: {{ site_url('get-involved/develop/release-signing-key') }} .. _{% trans %}`release signing key`{% endtrans %}: {{ site_url('get-involved/develop/release-signing-key') }}