Xubuntu website hijacked to serve malware

Comments

• RedSnt@feddit.dk ⁨20⁩ ⁨hours⁩ ago

  I saw a video on this yesterday. Apparently it’s a crypto scam thing.

  source
• barnaclebutt@lemmy.world ⁨17⁩ ⁨hours⁩ ago

  Poor new Linux users. You choose a good starting distribution. This sucks hard. Linux isos are not exe files. You can also check the hash files, but I don’t know anyone that does that on their personal PC.

  source

  • Qwel@sopuli.xyz ⁨17⁩ ⁨hours⁩ ago

    And the hashes are displayed on the website that got compromised

    source

    • undefinedTruth@lemmy.zip ⁨16⁩ ⁨hours⁩ ago

      To be fair, I doubt that someone who even knows how to verify a hash when would see an exe instead of an iso would think that this looks fine.

      source
    • barnaclebutt@lemmy.world ⁨16⁩ ⁨hours⁩ ago

      I doubt they bothered to change them. And, if you know how to check hashes then you wouldn’t run an exe file to download an ISO.

      source
• AntiBullyRanger@ani.social ⁨13⁩ ⁨hours⁩ ago

  Hopefully this motivates distro makers to secure their services a little bit more than xubuntu never did. Plenty distro still serve files under unsecure connections.

  source
• unexposedhazard@discuss.tchncs.de ⁨20⁩ ⁨hours⁩ ago

  Its been more than 24h and the site is still down. It only loads the main page but all links are dead.

  source