bruno icon indicating copy to clipboard operation
bruno copied to clipboard

Trojan Win32/Cinjo.O!cl after installing from winget

Open sbrahul opened this issue 8 months ago • 2 comments

I have checked the following:

  • [x] I have searched existing issues and found nothing related to my issue.

This bug is:

  • [x] making Bruno unusable for me
  • [ ] slowing me down but I'm able to continue working
  • [ ] annoying
  • [ ] this feature was working in a previous version but is broken in the current release.

Bruno version

2.1.0

Operating System

Windows 11

Describe the bug

After installing Bruno from winget command, Microsoft defender popped up warning me of two severe threats and then asked me to delete or quarantine the affected program. After looking at the details, I found that both were pointing to Bruno and the a trojan was detected of type: Trojan:Win32/Cinjo.O!cl

Command used to install: winget install bruno.bruno

.bru file to reproduce the bug

No response

Screenshots/Live demo link

Image

Image

sbrahul avatar Apr 09 '25 13:04 sbrahul

I have this problem as well, and only noticed it after upgrading to Bruno 2.2 from Bruno 1.38. Bruno will close and uninstall while I'm running request collections, it is completely unusable unfortunately. I reverted back to 1.38 and have not seen this issue yet. Here's a link to my 1.38 installer in case anyone else needs it. And just like the 2.2 installer, it does not contain malware =)

Related: #3259 - It seems Anoop is aware of this and hopefully working on a solution.

EDIT: Bruno 1.38 is now being uninstalled as well, but still not as often as 2.2 was.

mattc8818 avatar Apr 24 '25 17:04 mattc8818

We are also having this issue on Windows 11. Tried several things including downgrading to 1.38, installing directly via installer instead of winget, and no luck. Windows security is blocking the execution of Bruno and also the uninstaller.

jsheldon-qci avatar Apr 25 '25 14:04 jsheldon-qci

We've updated the code signing for Windows builds, so this issue should no longer occur.

anusree-bruno avatar May 26 '25 07:05 anusree-bruno

I downloaded version 2.3.0 yesterday, and am happy to report that Bruno has not uninstalled after a day of occasional use. It looks like this has been taken care of.

mattc8818 avatar May 28 '25 14:05 mattc8818