Phishing site with XnView?!

Post by **xnview** » Thu Apr 05, 2007 6:50 am

Currently i receive many emails from users that need to send SMS to be able to install XnView

ckv · Post by **ckv** » Thu Apr 05, 2007 10:01 am

www.xn-view.info/uk/ wrote:Download 100% Virus/Spyware Free You must read and accept the Terms of Use of this website before downloading any program.Terms Of use

Read the Terms Of use.

Technically they are charging for high-speed, virus-free downloads.

Clever, but the means are unethical. The worst thing about this is that, it might not be against the XnView license.

Edit: I downloaded the installer and manually extracted it's contents. The installer contains just the original XnView installer (no malware for my surprise), and nothing more. Also I scanned the installer in jotti.org and Virustotal. And neither of them found anything.

ps. the code for the installer is "JTT5J"... don't ask

Edit2:
Haha they made a new installer. New code is "QF22P"

Drahken · Post by **Drahken** » Fri Apr 06, 2007 5:35 am

Hmm... /uk/ is currently 404. If you just go to xn-view.info, it jumps you to /es/.

Clo · Post by **Clo** » Fri Apr 06, 2007 6:19 am

—> Drahken

Hello!

Hmm... /uk/ is currently 404. If you just go to xn-view.info, it jumps you to /es/.

• Right, I confirm.

• One gets the same page in Spanish…

KR
Claude
Clo

ckv · Post by **ckv** » Fri Apr 06, 2007 10:29 am

Yeah also the XnView installer has a new code.

I wonder why.

The owner of that domain apparently is from Panama.
See yourself. Search "xn-view.info" with http://www.afilias.info/whois_search/

helmut · Post by **helmut** » Fri Apr 06, 2007 7:49 pm

xnview wrote:Currently i receive many emails from users that need to send SMS to be able to install XnView

http://www.xn-view.info/uk/

Looks like a new way of phishing. On one hand it's flattering that they use XnView as a bait. On the other hand phishing is no good at all and it can even harm XnViews good reputation as a free, 100% spam-free and virus-free graphic viewer.

Like many other people, I get lots and lots of spam. I know how to deal with the spam and simply delete it but it's annoying. And this phishing shit makes me really angry and I look forward to the day that users have effective means to protect against spam and/or fire back.

ckv · Post by **ckv** » Sat Apr 07, 2007 10:34 am

And it's not just XnView, there is other programs too like: CDex, VLC Media Player, Winamp, Audacity, ...

Post by **xnview** » Tue Apr 10, 2007 6:37 am

ckv wrote:And it's not just XnView, there is other programs too like: CDex, VLC Media Player, Winamp, Audacity, ...

Yes, i've contacted the authors...

Clo · Post by **Clo** » Tue Apr 10, 2007 6:33 pm

Hello!

• One more trial in sight ?

KR
Claude
Clo

helmut · Post by **helmut** » Sat Apr 14, 2007 2:32 pm

This looks like a fully featured phishing affair: Several softwares are affected, including various Microsoft products:

- http://www.xxxwindowsmediaplayer.ms/
- http://www.xxxvistatransformationpack.info/
- http://www.xxxuniversal-vista.info/
- http://www.xxxieexplorer.info/
- http://www.xxxdirectx9.info/
- http://www.xxxyoutube-downloader.info/
- http://www.xxxflv-player.info/
- http://www.xxxemule-p2p.com/

Please note that I have added "xxx" to the above links to avoid raising those sites' page rank. To follow the links please remove the "xxx".

The problem is discussed a bit in the web:
- Jean-Baptiste KEMPF with his program VLC.
- http://forum.wordreference.com/showthread.php?t=384119 (Spanish with English)

XnView Software

Phishing site with XnView?!

Phishing site with XnView?!

Same in Spanish

Re: Phishing site?!

Trial ?