[GNC] [GNC-dev] URGENT: Fake gnucash website with fake download, most likely compromised file

[David Carlson]

Mystery deepens!  When I tried to open this fake website it was not
available in Tor browser but pinging it revealed a response from IPV6
address 2606:4700:3030::6815:5f93.  That IP does not seem to be registered

On Fri, Dec 9, 2022 at 5:40 PM Vincent Dawans <dawansv at gmail.com> wrote:

> Added screenshot showing fake gnucash site ad at top of google results.
>
> On Fri, Dec 9, 2022 at 3:31 PM Vincent Dawans <dawansv at gmail.com> wrote:
>
> > Precision: the link to the fake site reported below is actually
> > https://gnu-cash.org/main.php -- you need the full page link to see the
> > fake site that shows in the google ad.
> >
> > On Fri, Dec 9, 2022 at 3:24 PM Vincent Dawans <dawansv at gmail.com> wrote:
> >
> >> I just typed gnucash in google and the first hit was an ad pointing to
> >> gnu-cash.org (with a dash). It is a fake site that is a carbon copy of
> >> the official site but the download link goes to a setup.exe that is most
> >> likely a corrupted virus file.
> >>
> >> We need this removed ASAP. There is an option in google to report the
> >> site and mark it as spam/phishing. I imagine if more people do this it
> will
> >> get removed faster hopefully.
> >>
> >
> _______________________________________________
> gnucash-devel mailing list
> gnucash-devel at gnucash.org
> https://lists.gnucash.org/mailman/listinfo/gnucash-devel
>


-- 
David Carlson