logo

More Free Software Repackaged For Money

ID: f9f4245d-d290-5457-8210-2ac1224472d4

STIX ID: report--f9f4245d-d290-5457-8210-2ac1224472d4

Feed Name: Zscaler Security Research Blog

Threat Score
50/100

Date Published: 2025-04-02

Date Updated: 2026-05-01

...
...

This report documents a campaign of malicious websites repackaging popular free software installers (e.g., FileZilla, VLC, 7zip, WinSCP, Notepad++) into ~1.7MB executables that silently install adware/spyware (StartNow/Zugo toolbar), set MSN/Bing as homepage/search, and are spread via forum spam and search-engine results; the author provides a list of affected URLs, sample filenames, screenshots, and notes low detection rates by antivirus vendors.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.