keybase / keybase/keybase-issues

Project/application shares name with malware family

Open
#3,008 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
No language data
Stars
899
Forks
40
PR merge metrics
No merged PRs in 30d

Description

This is related to #2613.

ref: https://researchcenter.paloaltonetworks.com/2015/06/keybase-keylogger-malware-family-exposed/

There is a named malware family called KeyBase. I suspect it's possible this is why Trend Micro is "aggressively" treating it as malware and deleting installers.

I don't know what a possible fix might be.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reviewing issue #2613 and the linked Palo Alto Networks research about the KeyBase malware family. Verify whether Trend Micro's installer deletion is caused by the name collision; done means confirming the cause and documenting an actionable remediation.

Written by the indexing model from the issue text.

Assessment

Domain
security
Issue type
Bug
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.