duff icon indicating copy to clipboard operation
duff copied to clipboard

Dreda.org registration lapsed, and has been picked up by a bad actor.

Open MrJoy opened this issue 1 year ago • 2 comments

It appears that in 2021 this domain was registered after having lapsed. Currently, duff.dreda.org seems to direct to malvertising of some sort. ("Your computer is infected with a virus!" type stuff.)

MrJoy avatar Feb 08 '24 20:02 MrJoy

Thank you! I forgot to update things here when it expired.

I changed the target URL above too so people won't accidentally end up in a bad place while this gets fully fixed.

elmindreda avatar Feb 16 '24 14:02 elmindreda

I filed a security report with homebrew because the home for duff is getting the bad redirects.

> brew home -v duff
Opening homepage for Formula duff
/usr/bin/open https://duff.sourceforge.net/

@elmindreda if you still have control over https://sourceforge.net/projects/duff/ you might want to update it so that https://duff.sourceforge.net/ and https://duff.sourceforge.io/ will not redirect to the malicious domain.

sodul avatar Apr 12 '24 20:04 sodul