Attackers use FileZilla to steal users' FTP accounts.

Note that FileZilla is the FTP Client Version 3.7.3 and 3.5.3. According to the official blog of antivirus Software company Avast Software, hackers intrude into the download website and use a malicious version of FileZilla to replace the official version to lure users into installing and stealing their FTP logon creden.

After the installation, the user can bypass the firewall to send the stolen login information. The filezillaand the official filezillaare identical in terms of function and ui. the main file is smaller than the executable file filezilla.exe, and the content in About FileZilla is also different ().

The malicious filezilla.exe contains two additional DLL file ibgcc_s_dw2-1.dll and libstdc ++-6.dll, with automatic update disabled, apparently to Prevent Automatic Updates from overwriting malicious executable files.

For more information, see install FileZilla 3.5.3 In Ubuntu 12.10.

For more information about FileZilla Client, click here.
FileZilla Client: click here