Skip to content

Malicious link found in README.md #125

Open

Description

@SharkPolo

Description

A potentially malicious or phishing link was identified in the project documentation.

Location

  • File: README.md
  • Line number (optional): Line 66

Malicious Link (Defanged)

  • http://www.oblita.com/interception

Recommended Action

Please remove or replace this link immediately to protect project users.

Activity

  1. evilC commented on May 22, 2026

    @evilC
    Owner

    Line 66 points to the GitHub repo for the Iterception driver.
    The oblita.com website did used to be his home site, but he let the domain lapse and is now malicious - this has been a known issue for a couple of years.
    However AFAIK there is nothing on my github page or in the AHI code which links there.
    As far as we know, the download on the GitHub repo is good.

  2. Misha4ek commented on Aug 25, 2026

    @Misha4ek

    Line 66 points to the GitHub repo for the Iterception driver.

    Wdum?
    The 66 line in README.MD of the lastest realease points to malicious site. It redirected couple of times and asked me to paste smth in my Win + R to download and execute file, that I suppose is maliceous cause the site was looking like cloudflare, which is phishing cause cloudflare would never ask me to paste smth in Win + R to verify that I am a human.

  3. evilC commented on Aug 25, 2026

    @evilC
    Owner

    Line 66 points to the GitHub repo for the Iterception driver.

    Wdum? The 66 line in README.MD of the lastest realease points to malicious site.

    What, exactly, is the URL you are seeing on line 66?
    This is what is on line 66 of the README in this repo:

    Image

    Are you sure you are not looking at an older branch of this repo or something? Line 66 used to point to oblita.com, which is now malicious, but I changed it some time ago to point to GitHub.
    Here is a link to edit README.md in the master branch of this repo:
    https://github.com/evilC/AutoHotInterception/edit/master/README.md

  4. Misha4ek commented on Aug 25, 2026

    @Misha4ek

    I am downloading .zip file from the Releases page, in root of that folder there is README.md that on line 66 contains the bad link.
    I am bad at navigating github and in code in general. I can see that file content of .zip file is not the same as supposetly source code on the main page. There is no .gif .png or git files.
    The link you gave is edit link, I can't use it to see the code, there is an error full screen and I don't know how to switch to "View" mode is there is one.

    https://github.com/evilC/AutoHotInterception/edit/master/README.md

  5. evilC commented on Aug 25, 2026

    @evilC
    Owner

    Ah! You are indeed correct. It seems like when I packaged the release, I must have somehow used an old copy of the README.
    I will correct now and re-upload

  6. evilC commented on Aug 25, 2026

    @evilC
    Owner

    This is now fixed - I released v0.9.2. Many thanks @Misha4ek for pointing out that the problem was with the release ZIP and not with the repo.
    I also added the gif and png files, and changed the readme to relative links, so they should work on the github page and in a local markdown viewer

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions