Downloading 3rd Party OpenVPN Configs May Be Dangerous. Here’s Why.

Discussion in 'malware problems & news' started by itman, Jun 21, 2018.

  1. itman

    itman Registered Member

    Joined:
    Jun 22, 2010
    Posts:
    8,593
    Location:
    U.S.A.
    'Words of wisdom" from Lawrence:
    https://www.bleepingcomputer.com/ne...-openvpn-configs-may-be-dangerous-here-s-why/
     
    itman, Jun 21, 2018
    #1
  2. Minimalist

    Minimalist Registered Member

    Joined:
    Jan 6, 2014
    Posts:
    14,883
    Location:
    Slovenia, EU
    Interesting. I never thought about it. One really shouldn't trust anything downloaded from unknown sources.
     
    Minimalist, Jun 22, 2018
    #2
  3. Azure Phoenix

    Azure Phoenix Registered Member

    Joined:
    Nov 22, 2014
    Posts:
    1,560
    Even known sources aren’t 100% safe. Remember the Ccleaner incident?
     
    Azure Phoenix, Jun 22, 2018
    #3
  4. Minimalist

    Minimalist Registered Member

    Joined:
    Jan 6, 2014
    Posts:
    14,883
    Location:
    Slovenia, EU
    Yes, true. Luckily OpenVPN configuration files are easier to review than CCleaner's binary :)
     
    Minimalist, Jun 22, 2018
    #4
  5. guest

    guest Guest

    compare the hash, it is easy.
     
    guest, Jun 22, 2018
    #5
  6. Minimalist

    Minimalist Registered Member

    Joined:
    Jan 6, 2014
    Posts:
    14,883
    Location:
    Slovenia, EU
    With CCleaner incident it wouldn't help. Legitimate binary was compromised in their development process.
     
    Minimalist, Jun 22, 2018
    #6
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...