SourceForge Injecting Malware In To Software Installers

SourceForge Malware

A popular and long-standing software download site, SourceForge, is injecting malware in to its software installers. 

If you go to Google and search for ‘free whatever software’, chances are you’ll stumble upon SourceForge.

For example, if you attempt to download a popular FTP program, FileZilla, you will not be receiving an installer for just FileZilla.  Instead, you’ll find an installer loaded up with adware and malware.

If you’re utilizing ESET Nod32 Antivirus, it detects the installer’s injected payload:

ESET Detecting PUP on SourceForge
ESET Detecting PUP on SourceForge

So it looks like SourceForge has gone the same route as CNET.  I have personally avoided both sites for years and if you’re looking for installers for common programs, Ninite is a legitimate solution.

I am a consignment software specialist, System Administrator for hundreds of consignment workstations across North America, and developer of Peeps' Software! I've been helping consignment & resale store-owners since 2003. I started The Computer Peeps in February of 2010. After 18+ years of working with consignment stores, I understand the unique challenges consignment & resale store-owners face. From electrical issues in old building or strip malls, to advocating for them when their consignment software keeps crashing. I now manage hundreds of computer systems, servers & websites for store-owners all across North America and I am the developer/programmer of Peeps' Software -- the only software written FOR consignment & resale stores specifically.

Leave a Comment

Your email address will not be published. Required fields are marked *


Back To Top