News for hackers. Stuff that matters.
Re:Xubuntu.org Might Be Compromised by 1313ed01 on Sunday October 19, 2025 @01:21PM (#45635957)
What scared me in that thread was the mention of the fake lubuntu site that is still up since someone took over the old domain last year(?). I downloaded and installed lubuntu just some week ago. Luckily I am pretty sure I downloaded it from the real site. The fake one only has downloads up to 19.04 or something.

Have not installed Lubuntu in a few years, so never noticed any of the news of the domain change and take-over. Did not really find anything more about it when searching today?

Re:Xubuntu.org Might Be Compromised by ginsider_oaks on Sunday October 19, 2025 @02:33PM (#45636681)
if you use ublock origin you should be OK, it warns you when you try to access lubuntu.net
Re:Xubuntu.org Might Be Compromised by hu3 on Sunday October 19, 2025 @04:43PM (#45637782)
Indeed:

uBO has prevented the following page from loading:

"FAKElubuntu.net I wont give backlinks too"

The page was blocked because of a matching filter in uBlock filters – Badware risks.

Re:Xubuntu.org Might Be Compromised by 1313ed01 on Sunday October 19, 2025 @05:02PM (#45637953)
What is it triggered by?

I have not used unlock in years, since NoScript as a side-effect of not running scripts tends to block almost everything anyway (in particular ads), but maybe I should install it again after all for things like this.

Re:Xubuntu.org Might Be Compromised by horseradish7k on Sunday October 19, 2025 @05:31PM (#45638196)
the "badware risks" filter list
Re:Xubuntu.org Might Be Compromised by bstsb on Sunday October 19, 2025 @06:06PM (#45638472)
that website, although unofficial, looks to be one of the many sites online that stuffs a bunch of ads on a wordpress template and links straight to the official download links after a long-winded AI article about the software

also see Bloxstrap, a popular Roblox bootstrapper - its official URL is https://bloxstraplabs.com, but many fakes rank high in SEO (bloxstrap[.]net, blxstrap[.]com, bloxstrape[.]com, bloxstrapper[.]com, bloxstraps[.]net, bloxstrapp[.]com, thebloxstrap[.]net)

currently it isn't hosting malware, but this could obviously change