Comment by kevincloudsec
12 hours ago
same threat group hit filezilla last month with a fake domain. this time they didn't even need a fake domain, they compromised the real one's api layer. the attack is evolving from 'trick users into visiting the wrong site' to 'make the right site serve the wrong file.'
FileZilla has had a history of intentionally bunding adware/spyware, so aren't they the threat to begin with?
https://en.wikipedia.org/wiki/FileZilla#Bundled_adware_issue...