Re:Google serving sponsored link to Homebrew site clone with...
by Shank on Monday January 20, 2025 @01:06PM
(#42771345)
Check if /tmp/update exists. If it does, you’re infected.
[ Parent
| on HN ]
Re:Google serving sponsored link to Homebrew site clone with...
by seenukarthi on Tuesday January 21, 2025 @11:16PM
(#42788944)
I think the malware tries to delete this file. So, it won't be a reliable method to identify whether you were infected.