Home » Cyber Security News » Fake site pretending as KeePass Password Manager found distributing adware

Fake site pretending as KeePass Password Manager found distributing adware

  • The fake site is part of a large network of sites that are involved in the distribution of adware bundles as free programs.
  • The site is named as keepass[.]com and contains four links for Windows, Windows Portable, Mac and Linux.

A fake site that appears to promote the popular KeePass password management software has been found distributing adware to unsuspecting visitors. The fake site is part of a large network of sites that are involved in the distribution of adware bundles as free programs.

What’s the matter?

Berk Cem Göksel, an independent security researcher, has discovered that a site named keepass[.]com is acting as the official site for KeePass Password manager to distribute malware. The malware is propagated in the form of .dmg and .exe files which are available on the site.

How does the fake site look?

According to BleepingComputer, keepass[.]com contain four links of KeePass for Windows, Windows Portable, Mac and Linux.

While the first three links contain similar URLs and download adware bundles, the fourth link for Linux takes the visitors to the legitimate keepass[.]info site.

The three malicious links are cdndownloadapr[.]com and are meant for adware bundles whose file names are dynamically generated based on the values in the URL.

What do the adware bundles carry?

The distributed adware bundles come with a digital certificate signed by a company named ‘In Profit Limited’. The signs used in these certificates are changed quite often.

Once the users click ‘Next’ on these certificates, they are presented with a series of offers that include search offers, extensions, anti-malware PUPs, and other unwanted malicious software.

The adware bundle is also capable of stealing a ton of information from infected systems that include the hardware type, location and more.

How to stay safe?

It is always advisable to download and install software from trusted and official sites. In case you are prompted to install software other than the intended program, then immediately shut down the program and do not let it continue.

Information Security - InfoSec - Cyber Security - Firewall Providers Company in India

What is Firewall? A Firewall is a network security device that monitors and filters incoming and outgoing network traffic based on an organization's previously established security policies. At its most basic, a firewall is essentially the barrier that sits between a private internal network and the public Internet.


Secure your network at the gateway against threats such as intrusions, Viruses, Spyware, Worms, Trojans, Adware, Keyloggers, Malicious Mobile Code (MMC), and other dangerous applications for total protection in a convenient, affordable subscription-based service. Modern threats like web-based malware attacks, targeted attacks, application-layer attacks, and more have had a significantly negative effect on the threat landscape. In fact, more than 80% of all new malware and intrusion attempts are exploiting weaknesses in applications, as opposed to weaknesses in networking components and services. Stateful firewalls with simple packet filtering capabilities were efficient blocking unwanted applications as most applications met the port-protocol expectations. Administrators could promptly prevent an unsafe application from being accessed by users by blocking the associated ports and protocols.


Firewall Firm is an IT Monteur Firewall Company provides Managed Firewall Support, Firewall providers , Firewall Security Service Provider, Network Security Services, Firewall Solutions India , New Delhi - India's capital territory , Mumbai - Bombay , Kolkata - Calcutta , Chennai - Madras , Bangaluru - Bangalore , Bhubaneswar, Ahmedabad, Hyderabad, Pune, Surat, Jaipur, Firewall Service Providers in India

Sales Number : +91 9582 90 7788 | Support Number : +91-9654016484
Sales Email : sales@itmonteur.net | Support Email : support@itmonteur.net

Register & Request Quote | Submit Support Ticket