Threat actors are now targeting KeePass to spread malware and steal credentials, posing a major risk to users of this password manager.
  • unexposedhazard@discuss.tchncs.deEnglish
    14·
    19 days ago

    The campaign, which appears to have begun in early April 2025, involves compromised download links and trojanized versions of the legitimate KeePass application that appear identical to the authentic software on the surface, while harboring dangerous capabilities beneath.

    Yeah this is hardcore clickbait and borderline slander of KeePass. They arent “weaponizing” KeePass, because KeePass itself is not involved in the scheme at all. At best you could say “The KeePass name/brand is being weaponized”. As you said, if you just download and install stuff from random links, you cant be saved anyways.