3 ms·

Hello, Not sure where to turn. You guys are pretty leet. Sorry in advance if this doesn't belong. I'm being sent emails from cisco@appserviceinfo.com telling

by vedmed 2y ago

Hello, Not sure where to turn. You guys are pretty leet. Sorry in advance if this doesn't belong. I'm being sent emails from cisco@appserviceinfo.com telling me to update my VPN client and linking to https://github.com/UpdaterCisco/Cisco_Anyconnect_SSLVPN/raw/refs/heads/main/cisco-secure-client-win-5.1.6.103-core-vpn-predeploy-k9.msi https://github.com/UpdaterCisco/Cisco_Anyconnect_SSLVPN/raw/... It doesn't show up as anything on virustotal but this is certainly some sort of malware 0day (except its been around for a week). I reported the https://github.com/UpdaterCisco https://github.com/UpdaterCisco to github as hosting malware and its still up some days later. Can someone with a voice that is heard get this taken care of? Or tell what I can do?

hypeatei 2y ago
Linking directly to the file download probably isn't the best idea. Small chance someone accidentally opens it.
OJFord 2y ago
Have you told actual Cisco? They have an interest in mitigating it and may have more luck or contacts, or just more people to throw at it. (A lot of companies have a phishing@ address or similar for this kind of thing.)