+- Sinisterly (https://sinister.ly)
+-- Forum: General (https://sinister.ly/Forum-General)
+--- Forum: World News (https://sinister.ly/Forum-World-News)
+--- Thread: FileZilla allegedly bundled with malware (/Thread-FileZilla-allegedly-bundled-with-malware)
Pages:
1
2
FileZilla allegedly bundled with malware - Blink - 07-01-2018
A user of FileZilla was wondering why the installer did so terribly in a VirusTotal scan (https://www.virustotal.com/en/file/d93fd89aa6de8363b364f522c38b171dc2a1d1525b7dd0d2c35fab0428c38255/analysis/)
The creator, botg, responded saying that the scans returned false positives.
Another user later responded noting that the hash of the file didn't match the one on the site, to which botg responded with:
Quote:The hash doesn't match because the filename doesn't match.
After this, the thread continues with botg defending FileZilla in other ridiculous ways:
Quote:You get AV flags for business reasons on the AV vendor's behalf, not because of malware.
Although not necessarily malicious, botg's behavior seems sketchy at best.
Reddit thread: https://www.reddit.com/r/netsec/comments/8t4xrl/filezilla_malware/
Here's the original thread on the FileZilla support forum: https://forum.filezilla-project.org/viewtopic.php?f=2&t=48441&sid=1f85514983f5dcfa4d6f37d3c95f820c&start=15
VirusTotal (again): https://www.virustotal.com/en/file/d93fd89aa6de8363b364f522c38b171dc2a1d1525b7dd0d2c35fab0428c38255/analysis/
AlternativeTo has also recently flagged FileZilla as "may not be safe"
For alternatives, try Cyberduck (https://cyberduck.io/) or WinSCP (https://winscp.net/eng/index.php)
If you do end up deciding that FileZilla is safe, you may want to compile it from source (https://filezilla-project.org/sourcecode.php) instead of using the binary installer.
UPDATE: It seems to distribute adware, and uses a shady installer, but is not necessarily malware. See here: https://sinister.ly/Thread-FileZilla-allegedly-bundled-with-malware?pid=813756#pid813756
RE: FileZilla allegedly bundled with malware - phyrrus9 - 07-01-2018
tldr: filezilla did some shady stuff. that's all this thread says. @"Ender" should clarify more
RE: FileZilla allegedly bundled with malware - Blink - 07-01-2018
(07-01-2018, 01:33 AM)phyrrus9 Wrote: tldr: filezilla did some shady stuff. that's all this thread says. @"Ender" should clarify more
Clarify what?
RE: FileZilla allegedly bundled with malware - Vultra - 07-01-2018
Do we know exactly what type of malware it is?
RE: FileZilla allegedly bundled with malware - Percent - 07-01-2018
That's why everybody advises people to compile from the source, as compared to just downloading the seemingly trustworthy binaries.
RE: FileZilla allegedly bundled with malware - mothered - 07-01-2018
This has made my day, absolutely hilarious:
Quote:The hash doesn't match because the filename doesn't match
Appreciate the Info @"Ender".
RE: FileZilla allegedly bundled with malware - Blink - 07-01-2018
(07-01-2018, 02:58 AM)Mimiakira Wrote: Do we know exactly what type of malware it is?
After reading into it more (seeing what VT actually reports), it seems be a shady installer; thus, botg was not entirely incorrect. It appears to use InstallCore, or FusionCore for the installation, you can read up on that here: https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=PUA%3aWin32%2fInstallCore
Therefore, FileZilla would not be considered straight malware, but simply riskware, as it uses an installer that distributes adware and has a low reputation. I'll update the original post with this information. However, even with this information, I would recommend that you avoid using it, and use an alternative instead.
RE: FileZilla allegedly bundled with malware - Bionic - 07-01-2018
It's not the first time filezilla bundled malware. They were one of the voluntary partners of sourceforge's bundled installer before they pushed it on everyone and then got rid of it after they got bought out.
RE: FileZilla allegedly bundled with malware - Vultra - 07-01-2018
Well, I'm now using WinSCP and works sufficiently well.
RE: FileZilla allegedly bundled with malware - darkninja1980 - 09-26-2018
very interesting news. thank you OP for sharing.