[keycloak-user] [keycloak-dev] Trojan in Keycloak Javascript Adapter?

Stian Thorgersen sthorger at redhat.com
Mon Feb 12 10:41:14 EST 2018


Sorry, I realised what happened. It was an old message that for some reason
was just delivered.

On 12 February 2018 at 15:32, Ariel Carrera <carreraariel at gmail.com> wrote:

> Hi Stian how you doin ?
> Are you talking to me? It's about my virus report?
> It was solved with your submit (or my submit). Microsoft Defender tells
> now that files are valid.
> It was detected as a virus for a while but after submit file and update
> virus definitions it was marked as valid.
> I remember that we talked about it on January 9th/10th! Thank you!
>
> 2018-02-12 5:35 GMT-03:00 Stian Thorgersen <sthorger at redhat.com>:
>
>> Please try the files on https://www.microsoft.com/e
>> n-us/wdsi/filesubmission. That will allow Microsoft to investigate the
>> issue.
>>
>> I've just submitted it myself and it comes back clean, so this seems to
>> be an issue in your environment. Maybe your computer is affected?
>>
>> On 4 January 2018 at 15:52, Ariel Carrera <carreraariel at gmail.com> wrote:
>>
>>> Hi, It still happen on my environment.
>>> The problem persists with the new version of today (3.4.3.Final).
>>>
>>> Any comments from the dev team? Could you check it?
>>>
>>> Maybe it's a false alarm but it could be a serious security problem.
>>>
>>> - Screenshot of Keycloak JS Adapter alert:
>>>
>>> [image: Imágenes integradas 1]
>>>
>>> - Screenshot of Keycloak distribution alert:
>>>
>>> [image: Imágenes integradas 2]
>>>
>>> - Screenshot of Virus Definitions Version:
>>> [image: Imágenes integradas 3]
>>>
>>> - Screenshot of Virus Definition Upgrade:
>>> [image: Imágenes integradas 4]
>>>
>>> - Screenshot of Keycloak JS Adapter alert again (with definitions up to
>>> date):
>>> [image: Imágenes integradas 5]
>>>
>>> Thanks,
>>>
>>> 2018-01-03 18:07 GMT-03:00 Ariel Carrera <carreraariel at gmail.com>:
>>>
>>> > Thanks Ramunas, I will check My Windows defender’s definition version
>>> to
>>> > compare with you. I have Windows 10 (64 bit) updated on December 2017.
>>> >
>>> >
>>> > El El mié, 3 ene. 2018 a las 17:45, Rumanas <ramunask at gmail.com>
>>> escribió:
>>> >
>>> >> * just downloaded keycloak-js-adapter-dist-3.4.2.Final.zip file
>>> >> * extracted and scanned "keycloak-js-adapter-dist-3.4.2.Final" folder
>>> >> with Windows Defender on Windows 10 - no issues found
>>> >> * checked for Windows updates. New update "Definition Update for
>>> Windows
>>> >> Defender Antivirus - KB2267602 (Definition 1.259.1141.0)" was found
>>> and
>>> >> installed.
>>> >> * scanned again. No issues found.
>>> >>
>>> >> Ramūnas
>>> >>
>>> > --
>>> > Ariel Carrera
>>> >
>>>
>>>
>>>
>>> --
>>> Ariel Carrera
>>>
>>> _______________________________________________
>>> keycloak-user mailing list
>>> keycloak-user at lists.jboss.org
>>> https://lists.jboss.org/mailman/listinfo/keycloak-user
>>>
>>
>>
>
>
> --
> Ariel Carrera
>


More information about the keycloak-user mailing list