There is a repository on Github pretending to be us (we won’t link to it, for obvious reasons). The .dmg file is almost probably malware. Thanks to Anders for alerting us.
We strongly recommend you only download Easy Data Transform from our website. If you aren’t sure about a download:
Is there anything we (the community) can do to publically snub that repo? Maybe use the “Report repository”?
We have reported it to GitHub. So there is probably nothing to be gained by reporting it again, thanks.
It is still there. Very disappointing. In case anyone is tempted to download cracked software online, note that this Mac .dmg contains malware:
And this background image to trick people into allowing to do its evil thing:
If you ever see anything like this, run a mile.
If two warnings are insufficient then the third will probably slide past too, even though it is not about installation but explicitly handing over control.
I think I better understand the American Old West tradition of stringing up horse thieves. Despicable, leveraging honest work to trick the unwary.
The .dmg in Github was malware.
They even changed the .dmg background image to tell you to ignore any warnings!
We reported all this and Github did nothing for more than 3 weeks. So we wrote a blog post about it and posted it on Hacker News. Within approximately 10 minutes of the post reaching the front page of Hacker News, Github took the repository down. What a massive coincidence!
