4 ms·

BTW, the GitHub profile of the repository owner points to a sketchy website [0] which looks somewhat plausible from the first glance, but then more like a cont

BTW, the GitHub profile of the repository owner points to a sketchy website [0] which looks somewhat plausible from the first glance, but then more like a content stub on a closer inspection. [0] www.unicomedv.de Update: the reason I think it is more a content stub than a real thing is because there are no trial downloads available for theirs desktop products, and that's a red flag. Some site sections like "Office 365" represent a total nonsense with buttons leading nowhere. The pricing page has gray-on-black text elements, so looks clearly deoptimized for performing any real conversions. The whole site gives a strong fly-by-night vibe.

MrGilbert 3y ago
According to Northdata[0], the Managing Director has been part of the now-defunct "Black Diamond Suxess Club GmbH", which allegedly has been running a Ponzi scheme[1]. Also, if you look up the address, it's not an office complex. It's a residential area with single-family homes. [0]: https://www.northdata.com/M%C3%BCller,+Montgomery,+K%C3%B6ln/wjc https://www.northdata.com/M%C3%BCller,+Montgomery,+K%C3%B6ln... [1]: https://www.bekm.us/black-diamond-suxess-club-gmbh-mario-oreggia-and-his-cologne-shadow-plant-for-lyconet/ https://www.bekm.us/black-diamond-suxess-club-gmbh-mario-ore...
- garganzol 3y ago
  > if you look up the address, it's not an office complex. It's a residential area with single-family homes. And I bet there are no Wozniaks in that garage.
- bdcravens 3y ago
  > Also, if you look up the address, it's not an office complex. It's a residential area with single-family homes. I don't like considering this a signal. We want indie developers to flourish (a business name is little more than paperwork that anyone can get), and it's too easy for the nefarious to buy a "virtual office" in a legit-looking office building that is little more than a PO Box.
pevey 3y ago
I was coming here to say the same thing. It's really amazing that they used their own domain name to receive the payload from this malware analytics code. Possibilities are (1) all of the people associated with this company are not real people (faked LinkedIn profiles and everything), (2) they are really, really dumb, or (3) it was a roque employee/contractor who saw an opportunity to set this up and skim some cream.
Wronnay 3y ago
> there are no trial downloads available for theirs desktop products They have a contact form and it's quite normal here in Germany that you have to contact the business first before you can download the business software. All in all most normal small IT companies I know in my area have a similar looking website. Which makes it more unserious is that one of the Managing Directors has done shady business in the past.

MrGilbert 3y ago

According to Northdata[0], the Managing Director has been part of the now-defunct "Black Diamond Suxess Club GmbH", which allegedly has been running a Ponzi scheme[1]. Also, if you look up the address, it's not an office complex. It's a residential area with single-family homes. [0]: https://www.northdata.com/M%C3%BCller,+Montgomery,+K%C3%B6ln/wjc https://www.northdata.com/M%C3%BCller,+Montgomery,+K%C3%B6ln... [1]: https://www.bekm.us/black-diamond-suxess-club-gmbh-mario-oreggia-and-his-cologne-shadow-plant-for-lyconet/ https://www.bekm.us/black-diamond-suxess-club-gmbh-mario-ore...

garganzol 3y ago
> if you look up the address, it's not an office complex. It's a residential area with single-family homes. And I bet there are no Wozniaks in that garage.
bdcravens 3y ago
> Also, if you look up the address, it's not an office complex. It's a residential area with single-family homes. I don't like considering this a signal. We want indie developers to flourish (a business name is little more than paperwork that anyone can get), and it's too easy for the nefarious to buy a "virtual office" in a legit-looking office building that is little more than a PO Box.

pevey 3y ago

I was coming here to say the same thing. It's really amazing that they used their own domain name to receive the payload from this malware analytics code. Possibilities are (1) all of the people associated with this company are not real people (faked LinkedIn profiles and everything), (2) they are really, really dumb, or (3) it was a roque employee/contractor who saw an opportunity to set this up and skim some cream.

Wronnay 3y ago

> there are no trial downloads available for theirs desktop products They have a contact form and it's quite normal here in Germany that you have to contact the business first before you can download the business software. All in all most normal small IT companies I know in my area have a similar looking website. Which makes it more unserious is that one of the Managing Directors has done shady business in the past.