Thursday, June 4, 2015

Sourceforge Hijacks the Nmap Sourceforge Account



From: Fyodor <fyodor () nmap org>
Date: Wed, 3 Jun 2015 00:56:23 -0700

Hi Folks!  You may have already read the recent news about Sourceforge.net  hijacking the GIMP project account to distribute adware/malware.  Previously GIMP used this Sourceforge account to distribute their Windows  installer, but they quit after Sourceforge started tricking users with fake  download buttons which lead to malware rather than GIMP.  Then Sourceforge  took over GIMP's account and began distributing a trojan installer which  tries to trick users into installing various malware and adware before  actually installing GIMP. 

More:
http://seclists.org/nmap-dev/2015/q2/194