forked from I2P_Developers/i2p.www
Tag latest blog post
This commit is contained in:
@@ -1,31 +1,40 @@
|
|||||||
|
{% trans -%}
|
||||||
=========================
|
=========================
|
||||||
Malware at i2pbrowser.net
|
Malware at i2pbrowser.net
|
||||||
=========================
|
=========================
|
||||||
|
{%- endtrans %}
|
||||||
.. meta::
|
.. meta::
|
||||||
:date: 2014-02-16
|
:date: 2014-02-16
|
||||||
:excerpt: The site i2pbrowser.net is a fake I2P website mirror serving up malware for Windows.
|
:excerpt: {% trans %}The site i2pbrowser.net is a fake I2P website mirror serving up malware for Windows.{% endtrans %}
|
||||||
|
|
||||||
|
{% trans -%}
|
||||||
We have recently been made aware of the existence of i2pbrowser.net. This
|
We have recently been made aware of the existence of i2pbrowser.net. This
|
||||||
website copies our homepage and download page, and attempts to trick users into
|
website copies our homepage and download page, and attempts to trick users into
|
||||||
downloading Windows malware.
|
downloading Windows malware.
|
||||||
|
{%- endtrans %}
|
||||||
|
|
||||||
|
{% trans -%}
|
||||||
There are several indicators that point to i2pbrowser.net being a malware site:
|
There are several indicators that point to i2pbrowser.net being a malware site:
|
||||||
|
{%- endtrans %}
|
||||||
|
|
||||||
- The domain was registered on February 10th, 2014.
|
- {% trans %}The domain was registered on February 10th, 2014.{% endtrans %}
|
||||||
- The download URLs for Windows, Mac OSX, Linux, Android etc. all link to the
|
- {% trans %}The download URLs for Windows, Mac OSX, Linux, Android etc. all link to the same .exe file.{% endtrans %}
|
||||||
same .exe file.
|
- {% trans %}The .exe is only 741 KB; the official Windows installer for I2P is 13 MB.{% endtrans %}
|
||||||
- The .exe is only 741 KB; the official Windows installer for I2P is 13 MB.
|
|
||||||
|
|
||||||
|
{% trans -%}
|
||||||
We have not examined the malware ourselves, but it does not appear to be very
|
We have not examined the malware ourselves, but it does not appear to be very
|
||||||
sophisticated; it is not integrated into or bundled with the I2P software.
|
sophisticated; it is not integrated into or bundled with the I2P software.
|
||||||
Information security expert `Lance James`_ posted `a tweet`_ labelling it as
|
Information security expert `Lance James`_ posted `a tweet`_ labelling it as
|
||||||
"a standard dark comet rat".
|
"a standard dark comet rat".
|
||||||
|
{%- endtrans %}
|
||||||
|
|
||||||
|
{% trans -%}
|
||||||
Spread the word. The only offical download locations for I2P are linked on our
|
Spread the word. The only offical download locations for I2P are linked on our
|
||||||
`download page`_. All I2P download packages are GPG-signed by the
|
`download page`_. All I2P download packages are GPG-signed by the
|
||||||
`release signing key`_.
|
`release signing key`_.
|
||||||
|
{%- endtrans %}
|
||||||
|
|
||||||
.. _`Lance James`: https://twitter.com/lancejssc
|
.. _`Lance James`: https://twitter.com/lancejssc
|
||||||
.. _`a tweet`: https://twitter.com/lancejssc/status/434768667310821377
|
.. _{% trans %}`a tweet`{% endtrans %}: https://twitter.com/lancejssc/status/434768667310821377
|
||||||
.. _`download page`: {{ get_url('downloads_list') }}
|
.. _{% trans %}`download page`{% endtrans %}: {{ get_url('downloads_list') }}
|
||||||
.. _`release signing key`: {{ site_url('get-involved/develop/release-signing-key') }}
|
.. _{% trans %}`release signing key`{% endtrans %}: {{ site_url('get-involved/develop/release-signing-key') }}
|
||||||
|
Reference in New Issue
Block a user