Security

Download.com bundles malware in downloads

 December 6, 2011

Gordon Lyon (also known as Fyodor), the creator of Nmap, sent an email yesterday to the Nmap mailing list pointing out that the C|Net Download.com website is altering Nmap downloadable files injecting malware into them. It’s also possible that other files delivered by C|Net Download.com are also subject to the same problem.

This event is a very problematic one since it will create a complete loss of trust toward Download.com. It also reminds us of a critical aspect of security: all chain steps need to be secure and trusted.