Re: cygwin Digest 25 Jun 2018 00:46:06 -0000 Issue 10882 - virus alert

[David Stacey <drstacey at tiscali dot co dot uk>]

On 30/06/18 13:19, Richard Watt wrote:
> Did anyone else get a virus warning from the cygwin Digest 25 Jun 2018
> 00:46:06 -0000 Issue 10882?

It's an unsolicited invoice from someone you've never heard of. Of 
course it's malware :-)

It's an attachment to this post [1], compressed with gzip. The 
compressed version passes through VirusTotal cleanly. If you unpack the 
file, though, you discover that it isn't a PDF at all (surprise, 
surprise) but a .NET executable. And quite a few anti-virus tools flag 
it as something unpleasant [2].

Dave.

[1] - https://cygwin.com/ml/cygwin/2018-06/msg00264.html
[2] - 
https://www.virustotal.com/#/file/06c5c0701c5702dbe126ca2918e3ffdec8337f2a98b80939fdd0518e44fbffa6/detection


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple