Reply to thread

Message: <blockquote data-quote="Andy Ful" data-source="post: 1021733" data-attributes="member: 32260"><p>Winget is not especially dangerous for experienced users, but when used with phishing, it can be still dangerous for many users. The Windows built-in mechanism that validates the packaged applications can be abused, so the package can have a proper Microsoft Store certificate and contain malicious code. The trick used by the attacker is related to the user's belief that applications signed by Microsoft Store are benign. This is true (almost always) when the application is installed from Microsoft Store, but untrue when the packaged app is downloaded from 3rd party repository.</p></blockquote><p></p>

Top