Page 1 of 1
Phishing site with XnView?!
Posted: Thu Apr 05, 2007 6:50 am
by xnview
Currently i receive many emails from users that need to send SMS to be able to install XnView
http://www.xn-view.info/uk/
Posted: Thu Apr 05, 2007 10:01 am
by ckv
www.xn-view.info/uk/ wrote:Download 100% Virus/Spyware Free You must read and accept the Terms of Use of this website before downloading any program.
Terms Of use
Read the Terms Of use.

Technically they are charging for high-speed, virus-free downloads.

Clever, but the means are unethical. The worst thing about this is that, it might not be against the XnView license.
Edit: I downloaded the installer and manually extracted it's contents. The installer contains just the original XnView installer (no malware for my surprise), and nothing more. Also I scanned the installer in
jotti.org and
Virustotal. And neither of them found anything.
ps. the code for the installer is "JTT5J"... don't ask
Edit2:
Haha they made a new installer. New code is "QF22P"
Posted: Fri Apr 06, 2007 5:35 am
by Drahken
Hmm... /uk/ is currently 404. If you just go to xn-view.info, it jumps you to /es/.
Same in Spanish
Posted: Fri Apr 06, 2007 6:19 am
by Clo
—> Drahken

Hello!
Hmm... /uk/ is currently 404. If you just go to xn-view.info, it jumps you to /es/.
• Right, I confirm.
• One gets the same page in Spanish…

KR
Claude
Clo
Posted: Fri Apr 06, 2007 10:29 am
by ckv
Yeah also the XnView installer has a new code.

I wonder why.
The owner of that domain apparently is from Panama.
See yourself. Search "xn-view.info" with
http://www.afilias.info/whois_search/
Re: Phishing site?!
Posted: Fri Apr 06, 2007 7:49 pm
by helmut
Looks like a new way of phishing. On one hand it's flattering that they use XnView as a bait. On the other hand phishing is no good at all and it can even harm XnViews good reputation as a free, 100% spam-free and virus-free graphic viewer.
Like many other people, I get lots and lots of spam. I know how to deal with the spam and simply delete it but it's annoying. And this phishing shit makes me really angry and I look forward to the day that users have effective means to protect against spam and/or fire back.
Posted: Sat Apr 07, 2007 10:34 am
by ckv
And it's not just XnView, there is other programs too like: CDex, VLC Media Player, Winamp, Audacity, ...

Posted: Tue Apr 10, 2007 6:37 am
by xnview
ckv wrote:And it's not just XnView, there is other programs too like: CDex, VLC Media Player, Winamp, Audacity, ...

Yes, i've contacted the authors...
Trial ?
Posted: Tue Apr 10, 2007 6:33 pm
by Clo

Hello!
• One more trial in sight ?

KR
Claude
Clo
Posted: Sat Apr 14, 2007 2:32 pm
by helmut
This looks like a fully featured phishing affair: Several softwares are affected, including various Microsoft products:
-
http://www.xxxwindowsmediaplayer.ms/
-
http://www.xxxvistatransformationpack.info/
-
http://www.xxxuniversal-vista.info/
-
http://www.xxxieexplorer.info/
-
http://www.xxxdirectx9.info/
-
http://www.xxxyoutube-downloader.info/
-
http://www.xxxflv-player.info/
-
http://www.xxxemule-p2p.com/
Please note that I have added "xxx" to the above links to avoid raising those sites' page rank. To follow the links please remove the "xxx".
The problem is discussed a bit in the web:
-
Jean-Baptiste KEMPF with his program
VLC.
-
http://forum.wordreference.com/showthread.php?t=384119 (Spanish with English)