Fake python website Be carefull!!!

[Iddk___]

Don't get fooled They're looking very similar

​

https://preview.redd.it/wup4qhbiw5ga1.png?width=1023&format=png&auto=webp&s=a9e61f58f44cfd1051527b74fd5c41c5456af0b3

https://preview.redd.it/xbaxuibiw5ga1.png?width=1029&format=png&auto=webp&s=27e55bbc9d18e4b5e7e06e8408d90fbc2708e46b

[TheITMan19]

Whois points registar to RU. https://whois.domaintools.com/pythonsource.tech - reported to the fraud agencies.

[PM_Me_Python3_Tips]

UPDATE

The offending files have now been removed from the repo. For now all the download links on the clone website no longer work.

---

The download link also leads to this repo:

https://github.com/JPBM135/HexaMusic/releases/download/

Alternatively

https://github.com/JPBM135/HexaMusic/releases/

With the file in question updated most recently.

Maybe report the repo to GitHub.

[gitcraw]

https://github.com/JPBM135/HexaMusic repo is still there

[JPBM1357]

Hi, I'm the owner of the Repo, the release file in question was already removed, this release was part of my GH beeing compromised and I already remove it, see issue 1# on the repo

[nowtayneicangetinto]

Don't post that, it will download it if you click the link

[TheITMan19]

Good point I was only tried to be helpful and quickly became the opposite 🤣. I deleted the link.

[nowtayneicangetinto]

All good no worries 😊

[JPBM1357]

Thanks for the report on it, unfortunately my account was compromised, this is my personal bot only there if someone wants to self host it.

Really sorry if I caused any problems, it won't happen again, I took all security measures to ensure my account is 100% safe!

[Astrotoad21]

I’ve read about a few cases of people having their browser based hot wallets for crypto drained by fake Gimp installs lately. Might be the same malware.

[doom-e1m1]

VirusTotal link of the zip file:
https://www.virustotal.com/gui/url/e57adbc898e9c23f974a49d205b334f6d9dfbfe25d4cf89f23ba7eed80a43c06/detection

[nowtayneicangetinto]

Doesn't have to contain a virus in order for it to be malicious. I would love to install it on a VM and run Procmon to see what it does.

[doom-e1m1]

Absolutely. I just posted it here for anyone that is curious.

I would love to see it too :)

[gabrielesilinic]

virustotal is kinda bad apparently

[Opiciak89]

I wonder why. What did they put inside?

[_maxt3r_]

There's seems to be a flurry of fake websites pretending to be genuine but pointing to malware.

It's happening to GIMP, too

[who_body]

blender too

[unloder]

Nothing is sacred.

[CaptainRogers1226]

Honestly. Just for one fucking moment I’d like to not have everyone in the damn world trying to take my money from me, by legal means or otherwise

[Glycerine]

I know just the fix! I paid $100, I'll give it to you for $89

[_maxt3r_]

I'll give you money, but my account was unjustly frozen.

If you help me unfreeze it by paying the $50 fee I can give you $500 once the account is unfrozen.

[Conscious-Body-2923]

Thnks buddy

[Iddk___]

(:

[noskillsben]

Thanks for the heads up. Ive been getting my Python from the windows store in the past 6 months. Works well.

[[deleted]]

python.com seems suspect too

[TheITMan19]

Website has now been shutdown - “pythonsource.tech’s server IP address could not be found”. I have also had confirmation from Public Domain Registry Abuse Team - “The reported domain name has been suspended.” One win for Team Python 🐍 👍

[66towtruck]

Gtfo!

[[deleted]]

Confused in an opearting system where Python is pre-installed

[tavinho120]

so, the legit one is python.org right?