← Back to team overview

kicad-developers team mailing list archive

Re: ransomware locky detected on version 4.0.4 and 4.0.3

 

Paolo,

Does that firewall software of yours not provide any technical info about
this? Like filenames or byte sequences or similar?

Den 01/12/2016 16.41 skrev "Wayne Stambaugh" <stambaughw@xxxxxxxxx>:

> Paolo,
>
> This might be a false positive.  We've seen this in the past.  Would one
> of our windows package devs please verify the windows installer binaries
> on the kicad download page are still valid?
>
> In the future, please post your questions to the developers mailing list.
>
> Cheers,
>
> Wayne
>
> On 12/1/2016 7:56 AM, Paolo Barbato wrote:
> > Dear devolopers,
> >
> > I’m in charge fro internet security at Consorzio RFX laboratpry.
> >
> > We’ve blocked, using ChcekPoint firewall, a download attempt of an
> >  internal user of kicad from your official link
> > http://kicad-pcb.org/download/windows/ .
> > Compromised version are 4.0.4 and 4.0.3  both 64 and 32 bits that seems
> > have exploited by locky ransomware.
> >
> >
> >
> > Please check, and let me know.
> >
> >
> >
> >
> > ------------------------------------------------------------
> ------------------------------------
> > Paolo Barbato
> >
> > Consorzio RFX
> > <https://www.igi.cnr.it>corso Stati Uniti,4
> >
> > 35127 Padova - Italy
> > Network Administrator
> > phone: +39 049 8295097 fax: +39 049 8700718
> > ------------------------------------------------------------
> ------------------------------------
> >
>
> _______________________________________________
> Mailing list: https://launchpad.net/~kicad-developers
> Post to     : kicad-developers@xxxxxxxxxxxxxxxxxxx
> Unsubscribe : https://launchpad.net/~kicad-developers
> More help   : https://help.launchpad.net/ListHelp
>

References