The antivirus controversy
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 16.6k
- Forks
- 1.6k
- PR merge metrics
- No merged PRs in 30d
Description
There are several closed issues regarding this, but it seems like none of them actually discuss the source of the blacklist.
I recommend reading these articles:
- https://www.securemac.com/definitions/Chisel
- https://varutra.com/ctp/threatpost/postDetails/Russian-Backed-%27Infamous-Chisel%27-Android-Malware-Targeting-the-Ukrainian-Military/UjZ4SlB3Uy9MNStXWlVxZTFuMmMzQT09
- https://www.cisa.gov/news-events/analysis-reports/ar19-304a
- https://securityaffairs.com/150167/cyber-warfare-2/infamous-chisel-malware-targets-ukraine.html
- https://sensorstechforum.com/chisel-mac-trojan/
I'm not sure what can be done at this point. Maybe contacting virustotal and asking them for help? They are directly working with antiviruses afterall.
A valid argument might be that there are many self-containing ssh implementations and you could do the same thing (ssh over http/s) fairly easy with socat.
But the problem seems to be actually the name. Chisel is now known as a trojan. Maybe changing the name would be easier?
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No source files, tests, or entry points are named. Start by reviewing the referenced closed issues and security articles, then determine with maintainers whether the project name or another aspect should change; done requires an agreed resolution to the antivirus concern.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100