This is a most excellent place for technology news and articles.
The internet would have be believe the 2 AUR attacks this year are EVEN WORSE. Even though it barely affected less than 1% of users. The web is just nothing but constant rage bait, it sucks now =/
Better title: "make sure you're on the official website when you're trying to download software, even if you've used it before".
The list includes widely used tools like PowerToys, CrystalDiskMark, EasyBCD, Lively Wallpaper, and Wintoys, all cloned onto lookalike domains that in most cases rank above the real project pages on Google.
Off the top of my head, I wouldn't know the right domain to download CrystalDiskMark or EasyBCD, for example. It doesn't sound like these clones are perfect replicas, but a convincingly close enough domain name with the same page contents might fool a ton of people
Off the top of my head, I wouldn’t know the right domain to download CrystalDiskMark or EasyBCD, for example.
The way to find out the correct domain is to go to the Wikipedia page about the software.
But actually, the right way to do it is to install software using your Linux distro's package manager.
70??
Those are rookie numbers.
That's a load-bearing "plus" there.
70++
70#
Holy shit, when you unpack that mofo there are at least four +s there.
I believe I've seen the face of god, and it is the big 70.
Nothing new here. This has been the case forever.
Yeah, this "similar enough sounding domain name" tactic is far from new, and they must just be using new SEO tricks to get their sites to surface to users, that or illegitimate ad services promoting them.
They’re actually usually optimized to get AI to serve you the download link… or in the case of agentic browsers, just find, download and run it for you.
Step 1: Degoogle
Step 2: Demicrosoft
Step 3: Demi Lovato
Step 4: Demilitarize
The wikipedia search method to find the official sites has never failed me.
