Page 1 of 1

Phishing site with XnView?!

Posted: Thu Apr 05, 2007 6:50 am
by xnview
Currently i receive many emails from users that need to send SMS to be able to install XnView :-(

http://www.xn-view.info/uk/

Posted: Thu Apr 05, 2007 10:01 am
by ckv
www.xn-view.info/uk/ wrote:Download 100% Virus/Spyware Free You must read and accept the Terms of Use of this website before downloading any program.Terms Of use
Read the Terms Of use. :? Technically they are charging for high-speed, virus-free downloads. :evil: Clever, but the means are unethical. The worst thing about this is that, it might not be against the XnView license. :?

Edit: I downloaded the installer and manually extracted it's contents. The installer contains just the original XnView installer (no malware for my surprise), and nothing more. Also I scanned the installer in jotti.org and Virustotal. And neither of them found anything.

ps. the code for the installer is "JTT5J"... don't ask

Edit2:
Haha they made a new installer. New code is "QF22P"

Posted: Fri Apr 06, 2007 5:35 am
by Drahken
Hmm... /uk/ is currently 404. If you just go to xn-view.info, it jumps you to /es/.

Same in Spanish

Posted: Fri Apr 06, 2007 6:19 am
by Clo
—> Drahken

:) Hello!
Hmm... /uk/ is currently 404. If you just go to xn-view.info, it jumps you to /es/.
• Right, I confirm.

• One gets the same page in Spanish… :?

:mrgreen: KR
Claude
Clo

Posted: Fri Apr 06, 2007 10:29 am
by ckv
Yeah also the XnView installer has a new code. :D I wonder why.

The owner of that domain apparently is from Panama.
See yourself. Search "xn-view.info" with http://www.afilias.info/whois_search/

Re: Phishing site?!

Posted: Fri Apr 06, 2007 7:49 pm
by helmut
xnview wrote:Currently i receive many emails from users that need to send SMS to be able to install XnView :-(

http://www.xn-view.info/uk/
Looks like a new way of phishing. On one hand it's flattering that they use XnView as a bait. On the other hand phishing is no good at all and it can even harm XnViews good reputation as a free, 100% spam-free and virus-free graphic viewer.

Like many other people, I get lots and lots of spam. I know how to deal with the spam and simply delete it but it's annoying. And this phishing shit makes me really angry and I look forward to the day that users have effective means to protect against spam and/or fire back.

Posted: Sat Apr 07, 2007 10:34 am
by ckv
And it's not just XnView, there is other programs too like: CDex, VLC Media Player, Winamp, Audacity, ... :(

Posted: Tue Apr 10, 2007 6:37 am
by xnview
ckv wrote:And it's not just XnView, there is other programs too like: CDex, VLC Media Player, Winamp, Audacity, ... :(
Yes, i've contacted the authors...

Trial ?

Posted: Tue Apr 10, 2007 6:33 pm
by Clo
:) Hello!

• One more trial in sight ? :?

:mrgreen: KR
Claude
Clo

Posted: Sat Apr 14, 2007 2:32 pm
by helmut
This looks like a fully featured phishing affair: Several softwares are affected, including various Microsoft products:

- http://www.xxxwindowsmediaplayer.ms/
- http://www.xxxvistatransformationpack.info/
- http://www.xxxuniversal-vista.info/
- http://www.xxxieexplorer.info/
- http://www.xxxdirectx9.info/
- http://www.xxxyoutube-downloader.info/
- http://www.xxxflv-player.info/
- http://www.xxxemule-p2p.com/

Please note that I have added "xxx" to the above links to avoid raising those sites' page rank. To follow the links please remove the "xxx".

The problem is discussed a bit in the web:
- Jean-Baptiste KEMPF with his program VLC.
- http://forum.wordreference.com/showthread.php?t=384119 (Spanish with English)