Live data from Hacker News

Free Download Manager backdoored – a possible supply chain attack on Linux

securelist.com

141–143 of 143 posts

Re: Free Download Manager backdoored – a possible supply chain attack on Linux

#141

Free Download Manager had a long history of being compromised. For a long time, their auto-update ini file (kind of configuration file) was manipulated to point to a compromised version, thus people installed a clean version but will get a malware infested version once they updated. I believe they are the target all along. I’m surprised that people installed them on Linux. Stop believing OSS is automatically clean an…

[dead]

Re: Free Download Manager backdoored – a possible supply chain attack on Linux

#142
Dear Community,

Here is the second update regarding the issue: We have prepared a bash script that you can use to check the presence of malware in your system.

Launch Instructions:

Download the linux_malware_check.sh script and give it execute permissions.

You can do this by running: chmod +x linux_malware_check.sh.

Execute the script by running: ./linux_malware_check.sh. Please note that this script only identifies whether the mentioned potential threats are present on your computer, it does not remove them. If malware is detected, it is highly recommended to reinstall the system.

We once again sincerely apologize for any inconvenience that might have been caused.

Re: Free Download Manager backdoored – a possible supply chain attack on Linux

#143
post #22

This is installed by adding a shady repository to your apt sources.list... How is this a supply chain attack? My official debian repository have never been breached so far. This is no different from downloading an .exe off a shady website and blindly running the .exe. Also: https://packages.debian.org/search?keywords=download+manager... lists: • uget: https://sourceforge.net/projects/urlget/ • kget: https://apps.kde.…

Greetings from the Free Download Manager team! Here is our latest update regarding the issue. We have created a bash script that you can use to check the presence of the malware in your system. Please review our instructions on our official page: https://www.freedownloadmanager.org/blog/?p=664 We once again sincerely apologize for any inconvenience that might have been caused.
Post reply on HN