3 ms·

GitHub Hosting Malware Won't Remove After Report

13 points by vedmed 2y ago

vedmed 2y ago
Hello, Not sure where to turn. You guys are pretty leet. Sorry in advance if this doesn't belong. I'm being sent emails from cisco@appserviceinfo.com telling me to update my VPN client and linking to https://github.com/UpdaterCisco/Cisco_Anyconnect_SSLVPN/raw/refs/heads/main/cisco-secure-client-win-5.1.6.103-core-vpn-predeploy-k9.msi https://github.com/UpdaterCisco/Cisco_Anyconnect_SSLVPN/raw/... It doesn't show up as anything on virustotal but this is certainly some sort of malware 0day (except its been around for a week). I reported the https://github.com/UpdaterCisco https://github.com/UpdaterCisco to github as hosting malware and its still up some days later. Can someone with a voice that is heard get this taken care of? Or tell what I can do?
- hypeatei 2y ago
  Linking directly to the file download probably isn't the best idea. Small chance someone accidentally opens it.
- OJFord 2y ago
  Have you told actual Cisco? They have an interest in mitigating it and may have more luck or contacts, or just more people to throw at it. (A lot of companies have a phishing@ address or similar for this kind of thing.)
beretguy 2y ago
Make a DMCA claim on it.
- tyzoid 2y ago
  If you're not the copyright owner, that's a terrible idea. DMCA notifications are submitted under penalty of perjury: 17 USC 512c3(vi) A statement that the information in the notification is accurate, and under penalty of perjury, that the complaining party is authorized to act on behalf of the owner of an exclusive right that is allegedly infringed.
  - _Rabs_ 2y ago
    That's cute considering how many false DMCA takedowns are given on the daily. You keep living in that fantasy world of yours.
  - beretguy 2y ago
    For reference: https://www.eff.org/deeplinks/2020/11/github-reinstates-youtube-dl-after-riaas-abuse-dmca https://www.eff.org/deeplinks/2020/11/github-reinstates-yout...
JTyQZSnP3cQGa8B 2y ago
Don't worry, their magical "SaaS-enhancing World-revolutionizing AGI-powered Agent^TM" will soon take care of it automatically. Satya said it was powered by their new quantum computer.
vedmed 2y ago
Well they took it off a few hours after I made this post so thanks to mystery dude who pushed it through

13 points by vedmed 2y ago

Hello, Not sure where to turn. You guys are pretty leet. Sorry in advance if this doesn't belong. I'm being sent emails from cisco@appserviceinfo.com telling me to update my VPN client and linking to https://github.com/UpdaterCisco/Cisco_Anyconnect_SSLVPN/raw/refs/heads/main/cisco-secure-client-win-5.1.6.103-core-vpn-predeploy-k9.msi https://github.com/UpdaterCisco/Cisco_Anyconnect_SSLVPN/raw/... It doesn't show up as anything on virustotal but this is certainly some sort of malware 0day (except its been around for a week). I reported the https://github.com/UpdaterCisco https://github.com/UpdaterCisco to github as hosting malware and its still up some days later. Can someone with a voice that is heard get this taken care of? Or tell what I can do?

hypeatei 2y ago
Linking directly to the file download probably isn't the best idea. Small chance someone accidentally opens it.
OJFord 2y ago
Have you told actual Cisco? They have an interest in mitigating it and may have more luck or contacts, or just more people to throw at it. (A lot of companies have a phishing@ address or similar for this kind of thing.)

beretguy 2y ago

Make a DMCA claim on it.

tyzoid 2y ago
If you're not the copyright owner, that's a terrible idea. DMCA notifications are submitted under penalty of perjury: 17 USC 512c3(vi) A statement that the information in the notification is accurate, and under penalty of perjury, that the complaining party is authorized to act on behalf of the owner of an exclusive right that is allegedly infringed.
- _Rabs_ 2y ago
  That's cute considering how many false DMCA takedowns are given on the daily. You keep living in that fantasy world of yours.
- beretguy 2y ago
  For reference: https://www.eff.org/deeplinks/2020/11/github-reinstates-youtube-dl-after-riaas-abuse-dmca https://www.eff.org/deeplinks/2020/11/github-reinstates-yout...

JTyQZSnP3cQGa8B 2y ago

Don't worry, their magical "SaaS-enhancing World-revolutionizing AGI-powered Agent^TM" will soon take care of it automatically. Satya said it was powered by their new quantum computer.

vedmed 2y ago

Well they took it off a few hours after I made this post so thanks to mystery dude who pushed it through