file-converter.org: badware

Tornadoalley commented 6 months ago

Prerequisites

[X] This is NOT a YouTube, Facebook, Twitch or a shortener/hosting site report. These sites MUST be reported by clicking their respective links.
[X] I read and understand the policy about what is a valid filter issue.
[X] I verified that this issue is not a duplicate. (Use this button to find out.)
[X] I did not remove any of the default filter lists, or I have verified that the issue was not caused by removing any of the default lists.
[X] I did not enable additional filter lists, or I have verified that the issue still occurs without enabling additional filter lists.
[X] I do not have custom filters/rules, or I have verified that the issue still occurs without custom filters/rules.
[X] I am not using uBlock Origin along with other content blockers.
[X] I have verified that the web browser's built-in content blocker/tracking protection or network wide/DNS blocking (standalone or through a VPN) is not causing the issue.
[X] I have verified that other extensions are not causing the issue.
[X] If this is about a breakage or detection, I have verified that it is caused by uBlock Origin and isn't a site issue.
[ ] I did not answer truthfully to ALL the above checkboxes.

URL address of the web page

https://file-converter.org/

Description

The following site is a fake version of the official File Converter software provided at https://github.com/Tichau/FileConverter It needs to be added to the "Badware risks" list

Other extensions used

none

Screenshot(s)

![image](https://github.com/uBlockOrigin/uAssets/assets/73433060/8550e6d5-c367-444d-8199-7fbf54c29a0a) ![image](https://github.com/uBlockOrigin/uAssets/assets/73433060/d31f37d0-53f9-48bf-aaaa-36928cb99481)

Configuration

```yaml uBlock Origin: 1.56.0 Firefox: 123 filterset (summary): network: 125105 cosmetic: 45628 scriptlet: 18986 html: 1742 listset (total-discarded, last-updated): default: user-filters: 0-0, never ublock-filters: 37701-163, 1h.12m Δ ublock-badware: 7872-14, 1h.12m Δ ublock-privacy: 759-0, 1h.12m Δ ublock-unbreak: 2303-0, 1h.12m Δ ublock-quick-fixes: 187-0, 1h.12m Δ easylist: 82617-635, 1h.12m Δ easyprivacy: 50364-833, 1h.12m Δ urlhaus-1: 7690-5, 12m plowe-0: 3772-1, now filterset (user): [empty] trustedset: added: [array of 1 redacted] userSettings: [none] hiddenSettings: [none] supportStats: allReadyAfter: 362 ms (selfie) maxAssetCacheWait: 132 ms cacheBackend: indexedDB popupPanel: blocked: 1 network: plausible.io: 1 ```

JobcenterTycoon commented 6 months ago

Where is the badware? The download has 0 VT detections https://www.virustotal.com/gui/file/3a5f51e46b9314228955b6e42ba9cf5c37566a69a2f49acb9ad0ee8c3132ba24

Also the site says at the bottom

This site previously hosted the open source file converter project maintained by Adrien Allard. This page was created using a customized version of the Cayman theme by Jason Long.

We don’t block "unofficial" sites which host open source software or cracks. It must be malicious content like malware, adware, scam, spam or phishing.

Tornadoalley commented 6 months ago

Thank you. I have closed the request.

uBlockOrigin / uAssets