Discussion
Not sure who needs to know this, but if you download and install the Windows version of Rufus, the free software for writing ISO images to USB/CD-ROM, your PC will end up with about 100 trojans.
Edit: The site I downloaded from was rufus[.]ie which is apparently the official site. During installation, the software threw up a couple of rather verbose messages saying it needed to download additional components.
@sindarina ah that's my problem I guess.
@briankrebs Ventoy is the new Rufus BTW.
No clue whether the resulting ISO is also malicious, but tried running it just for giggles on a spare Windows PC from bootup and the machine's bios said nope, wouldn't allow b/c security policy. Not sure if it's related but I've never seen that message before trying to boot up from a USB.
@briankrebs I only had that problem if you click the skip windows login procedure. Or how ever its was called. (Last time i used it was years ago). then rufus modified the iso to skip the annoying install process which broke secure boot. Last time i used it without that option the image was valid with secure boot. and also never had any "want to download stuff" requests on my whitelist firewall. but may be outdated info.
@briankrebs Please consider sharing samples / IoCs, for instance blogging about it, or scanning the file & URL through virustotal
@briankrebs extremely rare secure boot W?
@demon6 IDK. I stopped counting at some point. It just kept downloading shit.
@briankrebs So, it's like a free pentest? Cause I read this and thought... I should try that. ;)
What happened? Did the old repo get compromised?
@briankrebs uhhh the official version, or did they get hit by SEO poisoning?
Install Fedizen
Get the full app experience
@briankrebs The official one downloaded via https://github.com/pbatard/rufus or https://rufus.ie? 🤨
Rufus - The Official Website (Download, New Releases)
GitHub - pbatard/rufus: The Reliable USB Formatting Utility