Welcome to the Onshape forum! Ask questions and join in the discussions about everything Onshape.

First time visiting? Here are some places to start:
  1. Looking for a certain topic? Check out the categories filter or use Search (upper right).
  2. Need support? Ask a question to our Community Support category.
  3. Please submit support tickets for bugs but you can request improvements in the Product Feedback category.
  4. Be respectful, on topic and if you see a problem, Flag it.

If you would like to contact our Community Manager personally, feel free to send a private message or an email.

Possible Onshape Downloader Malware

IsaacSubudhiIsaacSubudhi Member Posts: 1 EDU

After browsing a bit online our team discovered a form of Onshape malware. This website has been registered a few days ago and links to a downloadable version of Onshape. The website acts as a clone of the real site and no sign in or other buttons work. Upon running this program it seems to do nothing besides to run Radeon driver programs. Virus total reported that this .exe installer is tagged as a trojan and crypto miner. I will link the website below, be careful do not run the exe.


Virus total report: https://www.virustotal.com/gui/file/fd9d01b939b8eb9c33677638000031fe8677fb9258af669bcec802ead49dc2dd
Domain Information: https://www.whois.com/whois/onshapeservices.org
Unsafe Website: https://onshapeservices.org/


Link to the malicious .exe file for research: https://we.tl/t-XBenUWEEJv
Do not run on your system

Comments

  • john_rousseaujohn_rousseau Member, Onshape Employees, Developers Posts: 396

    Thanks for the notification @IsaacSubudhi. Our security team will look into this.
    This is definitely not a legitimate Onshape site.

    John Rousseau / VP, Technical Operations / Onshape Inc.
Sign In or Register to comment.