[tor-talk] TPO/TBB clone on SourceForge, use of TPO name

krishna e bera keb at cyblings.on.ca
Tue Sep 23 16:57:19 UTC 2014


On 14-09-23 12:45 PM, Fabio Pietrosanti (naif) wrote:
> Il 9/22/14, 11:42 PM, grarpamp ha scritto:
>> Whether clones or worse, there's something
>> very weird going on with these guys.
> Here an OSINT notes/analysis on several of that "suspicious" software:
> https://docs.google.com/spreadsheet/ccc?key=0AqtQ4kKC2rLzdEVjWkxTcUVTTWxmdnh4VWFDY25zTHc&usp=sharing
> 
> I've been particularly considering also other "suspicious" software that
> has been "strangely" solicited/promoted across many activists community
> but comes from unknown/anonymous persons.
> 
> Please note that such TorProject copycat site seems to be particularly
> targeting UAE users from Sourceforge's stats:
> - TorBrowser (16.170 download with 2nd top-country UAE)
> - Browser4Tor  (357 download, with 46% from UAE)
> 
> That analysis is a bit old, September 2013, but may contain userful info
> for people digging into that problem.

Also TorProject.org and mirrors may be blocked by countries or by
netnannies/firewalls, but SourceForge and Cnet download sites typically
arent, even though they often contain malware of late.  Thus the uptake
on malicious fakes can be high for some of Tor's likely users.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 465 bytes
Desc: OpenPGP digital signature
URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20140923/2131ffb1/attachment.sig>


More information about the tor-talk mailing list