January 28, 2014

Do you use FileZilla?

I do -- this is an excellent program for moving files via FTP (File Transport Protocol). A major heads up - from Slashdot:
FileZilla Has an Evil Twin that Steals FTP Logins
On the same day the world discovered Western intelligence agencies were siphoning user information from Angry Birds and other popular smartphone apps, a leading antivirus developer revealed hackers are doing the same thing with one of the most popular open-source applications on the Internet.

Maliciously modified versions of the popular file-transfer protocol (FTP) application FileZilla look and act just like the real thing, but include extra code that steals the login data typed in by users and sends it to an unauthorized server using the same FTP operation launched by the user without going through a firewall that might spot what it�s doing, according to an alert posted this afternoon by antivirus developer Avast Software.

FileZilla is the ninth most-downloaded application from the open-source site SourceForge, with 256.8 million downloads over its lifetime and almost 600,000 this week alone.

The malicious version is fully functional, uses the same graphical interface and component file names as the original, and masks itself further by avoiding any suspicious entries in the system registry, overt attempts to communicate with outside servers or other changes, according to the Jan. 27 alert from Avast.
Sigh -- Russians again... Be sure to get your files from the authorized distribution sites. Posted by DaveH at January 28, 2014 10:41 AM
Comments
Post a comment









Remember personal info?