investigating Brand: GitHub

Fake "GitHub Setup" download page pushes a suspicious Windows file

A site called gitappsdown[.]pro copies GitHub's look and offers a free "GitHub Setup" download for Windows. The giveaway: it hands you a password-protected file and shows you the password, which GitHub never does. Opening it can put malware on your computer. Download GitHub only from github[.]com.

A dark web page titled GITHUBSETUP using the GitHub logo, offering a Download for Windows button, an archive password of Github, and a Verified on VirusTotal label.
The fake gitappsdown[.]pro page. It shows the download button and the archive password it tells visitors to use. Nothing was covered; the page shows no personal information.

Documented in the archive

This alert matches a scam pattern with more examples and warning signs.

Observed domain or link

What to do

  • Download GitHub and developer tools only from github[.]com.
  • Do not open or unzip a downloaded file that comes with a password shown on the website.
  • If you already opened it, disconnect from the internet, run a full antivirus scan, and change important passwords from a different device.

Share this warning

This alert is also on WatchOut, our shareable alert feed, with one-tap sharing and free email alerts.

Latest alerts