When you purchase through links on our site, we may earn an affiliate commission.Heres how it works.
One of the responses shares a link to the fake WeTransfer page, where the tool can be downloaded.
Other people in the thread share their thanks for the contribution, and the discussion continues.
The choice of fake software is also curious.
Usually, that is where researchers could find clues to who the targets are.
If the attackers are faking software development tools, the targets are devs.
Both the Reddit and WeTransfer pages were designed to look almost identical to the originals.
Their URLs both contain brand names, followed by random numbers and characters.
They are both on .org and .net top-level domains, further boosting their legitimacy.