Malware im Snap Store

Philipp

Here to stay

Registered: Jul 2001
Location: Wien
Posts: 1928

21.03.2024 - 10:32

Ein weiterer Grund dafür, warum es nicht ratsam ist, Snaps zu verwenden. Canonical scheint keine der dort veröffentlichten Anwendungen zu überprüfen.

Als Folge davon leerten mehrere gefälschte BitCoin-Anwendungen das BitCoin-Wallet der jeweiligen User. Canonical hat die Anwendungen dann zwar entfernt, allerdings wurden sie einen Tag später unter einem anderen Entwickler-Account wieder veröffentlicht :bash:

Ja, der Snapstore scheint die ideale Plattform für Malware zu sein. Da kann man nach belieben gefälschte Anwendungen veröffentlichen, ohne das irgendetwas überprüft wird.

Guess Who's Back? Exodus Scam BitCoin Wallet Snap!

Previously Back in February, I blogged about a series of scam Bitcoin wallet apps that were published in the Canonical Snap store, including one which netted a scammer $490K of some poor rube’s coin.
The snap was eventually removed, and some threads were started over on the Snapcraft forum
Groundhog Day Nothing has changed it seems, because once again, ANOTHER TEN scam BitCoin wallet apps have been published in the Snap Store today.

Link: popey.com

COLOSSUS

Administrator
GNUltra

Registered: Dec 2000
Location: ~
Posts: 12073

21.03.2024 - 11:17

... more like "Crap Store", eh?

(^:

PIMP

Moderator

Registered: Sep 2002
Location: Wien ❤️
Posts: 8885

21.03.2024 - 11:20

Zitat aus einem Post von COLOSSUS
... more like "Crap Store", eh?

(^:

Philipp

Here to stay

Registered: Jul 2001
Location: Wien
Posts: 1928

22.03.2024 - 15:39

Immerhin, hat man jetzt reagiert:

Suspended account (and app name) after I managed to successfully publish it?

In the recent weeks, we have had a number of malicious crypto-wallet snaps being uploaded to the Snap Store. In response to this, we complete daily reviews of new snaps being uploaded. To protect our users, we quarantine and remove all snaps that look potentially crypto-related, and suspend the publisher’s account. This is the reason why your account was suspended.

We are in final reviews of a new policy that we will implement, requiring verified account status and additional publisher vetting for genuine publishers to be able to publish crypto-related snaps. It will be published in the forum in the following days. We can notify you when this is live.

Link: forum.snapcraft.io

Anscheinend werden in Zukunft aber nur Crypto Snaps überprüft.

Philipp Here to stay Registered: Jul 2001 Location: Wien Posts: 1928	21.03.2024 - 10:32 Ein weiterer Grund dafür, warum es nicht ratsam ist, Snaps zu verwenden. Canonical scheint keine der dort veröffentlichten Anwendungen zu überprüfen. Als Folge davon leerten mehrere gefälschte BitCoin-Anwendungen das BitCoin-Wallet der jeweiligen User. Canonical hat die Anwendungen dann zwar entfernt, allerdings wurden sie einen Tag später unter einem anderen Entwickler-Account wieder veröffentlicht Ja, der Snapstore scheint die ideale Plattform für Malware zu sein. Da kann man nach belieben gefälschte Anwendungen veröffentlichen, ohne das irgendetwas überprüft wird. Guess Who's Back? Exodus Scam BitCoin Wallet Snap! Previously Back in February, I blogged about a series of scam Bitcoin wallet apps that were published in the Canonical Snap store, including one which netted a scammer $490K of some poor rube’s coin. The snap was eventually removed, and some threads were started over on the Snapcraft forum Groundhog Day Nothing has changed it seems, because once again, ANOTHER TEN scam BitCoin wallet apps have been published in the Snap Store today. Link: popey.com
COLOSSUS Administrator GNUltra Registered: Dec 2000 Location: ~ Posts: 12073	21.03.2024 - 11:17 ... more like "Crap Store", eh? (^:
PIMP Moderator Registered: Sep 2002 Location: Wien ❤️ Posts: 8885	21.03.2024 - 11:20 Zitat aus einem Post von COLOSSUS ... more like "Crap Store", eh? (^:
Philipp Here to stay Registered: Jul 2001 Location: Wien Posts: 1928	22.03.2024 - 15:39 Immerhin, hat man jetzt reagiert: Suspended account (and app name) after I managed to successfully publish it? In the recent weeks, we have had a number of malicious crypto-wallet snaps being uploaded to the Snap Store. In response to this, we complete daily reviews of new snaps being uploaded. To protect our users, we quarantine and remove all snaps that look potentially crypto-related, and suspend the publisher’s account. This is the reason why your account was suspended. We are in final reviews of a new policy that we will implement, requiring verified account status and additional publisher vetting for genuine publishers to be able to publish crypto-related snaps. It will be published in the forum in the following days. We can notify you when this is live. Link: forum.snapcraft.io Anscheinend werden in Zukunft aber nur Crypto Snaps überprüft.

Malware im Snap Store

Forum Index > Software > Linux and other OS

Philipp

COLOSSUS

PIMP

Philipp