Free Download Manager had a long history of being compromised. For a long time, their auto-update ini file (kind of configuration file) was manipulated to point to a compromised version, thus people installed a clean version but will get a malware infested version once they updated. I believe they are the target all along. I’m surprised that people installed them on Linux. Stop believing OSS is automatically clean an…
Free Download Manager backdoored – a possible supply chain attack on Linux
141–143 of 143 posts
Re: Free Download Manager backdoored – a possible supply chain attack on Linux
#142Here is the second update regarding the issue: We have prepared a bash script that you can use to check the presence of malware in your system.
Launch Instructions:
Download the linux_malware_check.sh script and give it execute permissions.
You can do this by running: chmod +x linux_malware_check.sh.
Execute the script by running: ./linux_malware_check.sh. Please note that this script only identifies whether the mentioned potential threats are present on your computer, it does not remove them. If malware is detected, it is highly recommended to reinstall the system.
We once again sincerely apologize for any inconvenience that might have been caused.
Re: Free Download Manager backdoored – a possible supply chain attack on Linux
#143This is installed by adding a shady repository to your apt sources.list... How is this a supply chain attack? My official debian repository have never been breached so far. This is no different from downloading an .exe off a shady website and blindly running the .exe. Also: https://packages.debian.org/search?keywords=download+manager... lists: • uget: https://sourceforge.net/projects/urlget/ • kget: https://apps.kde.…