Web lists-archives.com

Re: cygwin Digest 25 Jun 2018 00:46:06 -0000 Issue 10882 - virus alert




On 30/06/18 13:19, Richard Watt wrote:
Did anyone else get a virus warning from the cygwin Digest 25 Jun 2018
00:46:06 -0000 Issue 10882?

It's an unsolicited invoice from someone you've never heard of. Of course it's malware :-)

It's an attachment to this post [1], compressed with gzip. The compressed version passes through VirusTotal cleanly. If you unpack the file, though, you discover that it isn't a PDF at all (surprise, surprise) but a .NET executable. And quite a few anti-virus tools flag it as something unpleasant [2].

Dave.

[1] - https://cygwin.com/ml/cygwin/2018-06/msg00264.html
[2] - https://www.virustotal.com/#/file/06c5c0701c5702dbe126ca2918e3ffdec8337f2a98b80939fdd0518e44fbffa6/detection


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple