Fosshub Breach

Hackers compromised FOSSHub, a popular file hosting service, and replaced the legitimate installer of several applications with malicious copies.

Note that some software projects such as Classic Shell, qBittorrent, Audacity, MKVToolNix, and others use as their primary file download service.

Impact

Users who downloaded Classic Shell and Audacity software packages from FOSSHub in the first week of August 2016, were affected by Fosshub breach.

Type of compromise

Attackers compromised the publishing infrastructure.