Avoid dangerous downloads

[Manila Tanaka]

Many downloads are always offered anywhere and we all know how dangerous some internet downloads really are.
Being careful is priority number one when it comes to downloads.
Because we need to protect our device, our data stored on it, as well as our coins, of course.

Downloads are inherently risky to our devices and should be avoided as often as possible. If in doubt, don’t do any download. Especially downloads related to crypto are often a target for hackers and malicious attacks.

Downloads to all devices are risky but experts have found out which devices are more vulnerable to malicious downloads:
- Mobile devices are most vulnerable, especially from unknown fabricators or from China, which are controlled by China’s regime.
- Windows devices are vulnerable because Windows is often targeted by hackers.
- Apple’s Mac and especially Linux devices (penguin) are less vulnerable to but of course, owners should also protect Linux device or Mac from hackers and be very very careful and avoid downloads.

Keep in mind: less vulnerable still means we should protect our devices, of course. We should always avoid internet downloads.


Open source vs. closed source

Open source means, it is possible for every coder to have a look into it, if it’s coded correctly or if any malicious parts for attacks are coded into a program.
While in closed source, it is not possible for coders to review it.
Open source is very important to avoid possible malware downloads. Of course, open source isn’t a guarantee to be safe and even experienced coders can make mistakes in coding or reviewing it or if it’s offered on a scam and phishing site. Better stay away, as pointed out earlier because downloads are inherently risky.


Ask for coder’s review of GitHub

Serious coders are always publishing on GitHub or make a program’s code visible as a part of open source act.
Because we are no coders, we need to rely on educated coder reviews and opinions of experts. If in doubt, we can ask a question here on Bitcointalk and a coder will look into it.
(Almost) every coder knows about GibHub and can access it as well.


Caution is our best insurance against malicious downloads and hackers
If we don’t make a download, we can not download a virus.
It’s a very clear fact.
We should avoid any unnecessary download and if we really need one (like Electrum), we should inform us if it’s open source and if in question, avoid it.
A random download doesn’t justify to risk damaging our device, our data stored on it, as well as our coins, of course.

Make sure to protect your device from malware due to downloads.

[dzungmobile]

Crypto security checklist
General security

Don't download things carelessly and verify what you download if you seriously want to use it but the note is, self-limit what you want to download is a first important layer of protection.

Lafu has big threads that can raises warning on risk of downloading malicious files.
List and explain of posted Trojan,Virus and Malware in the last Months!
Report Malware and Suspicious Links here so Mods can take Action !

[Porfirii]

It would be also great if, apart from avoiding downloading programmes from non official sources, and also thinking if you are going to use them and you really need them, we all read the T&C and the privacy policy so we understand which data will be collected and how they will be used. Risks when downloading go far beyond the obvious, and we may regret having used certain software.

[Rikafip]

@Manila Tanaka that's not a bad advice that you shared, but let me share you one: less (merit fishing) topics and more discussion with other members as that's the main purpose of this forum.

[Davidvictorson]

We should avoid any unnecessary download and if we really need one (like Electrum), we should inform us if it’s open source and if in question, avoid it.

Even on websites like Electrum, be sure to verify the GPG signature before download. if you were downloading the electrum wallet software, you can use the GPG signature to check that software actually came from Thomas Voegtlin the original developer and the others who have contributed to the source code and also that the website hasn't been hacked and uploaded with fake versions of the software which could be running malicious code that will try to steal your Bitcoin. Well you can check the software and check the signature on it to make sure it's coming from the right people and it has not been tampered with. Do it for every download of any wallet software.

[_act_]

Even on websites like Electrum, be sure to verify the GPG signature before download. if you were downloading the electrum wallet software, you can use the GPG signature to check that software actually came from Thomas Voegtlin the original developer and the others who have contributed to the source code and also that the website hasn't been hacked and uploaded with fake versions of the software which could be running malicious code that will try to steal your Bitcoin. Well you can check the software and check the signature on it to make sure it's coming from the right people and it has not been tampered with. Do it for every download of any wallet software.

This will depend on the app that I am using. If I am using Electrum, I can verify through PGP signature that the app comes from the right source but what about the exchanges and banks app that does not have any PGP signature? Also sometimes I do not need the PGP but go to application store to download apps like X, news apps and others that do not have anything to do with money. If many people download the app on application store, I will know that it is original.

[Lafu]

Well you can check the software and check the signature on it to make sure it's coming from the right people and it has not been tampered with.
Do it for every download of any wallet software.

The most of the Users or people that using that Wallet i guess even dont know how to doing that you cant expect that everybody has that knowledge we have.
As mentioned already from _act_ there are a lot or many Apps and Software that dont have that feat. for checking this.
Best way is to make your one research a few times before you download or install something new on your phone or PC that you dont know.

[albon]

We should avoid any unnecessary download and if we really need one (like Electrum), we should inform us if it’s open source and if in question, avoid it.
A random download doesn’t justify to risk damaging our device, our data stored on it, as well as our coins, of course.

When downloading a cryptocurrency wallet, caution is essential. Always download from the official websites, where you'll find links for Android, PC, and MAC versions, and avoid unknown sources such as email links, YouTube, MediaFire, torrent sites, fake websites, blogs, and impersonated accounts.

I see that anyone interested in any unnecessary downloads on the computer or phone must use an alternative device that is free of important and sensitive data and his accounts and crypto wallets. Also, the risk extends to installing unofficial browser extensions, which can also threaten the user. Frankly, even if the program is open source, scammers may exploit people's lack of knowledge in examining the code. Anyone can check the program's security before installing it by uploading it to sites like VirusTotal and Jotti's Malware Scan, where many multiple antivirus programs will scan it.

[Catenaccio]

When downloading a cryptocurrency wallet, caution is essential. Always download from the official websites, where you'll find links for Android, PC, and MAC versions, and avoid unknown sources such as email links, YouTube, MediaFire, torrent sites, fake websites, blogs, and impersonated accounts.

I see that anyone interested in any unnecessary downloads on the computer or phone must use an alternative device that is free of important and sensitive data and his accounts and crypto wallets.

People need to be cautious with all of their downloads. Their devices, computers, phones can be infected by download other things beyond cryptocurrency wallet softwares.

If they download unofficial ones, they have bigger risk of get phished by fake applications and infected with malicious components that can steal many sensitive information on their devices from computers to phones.

When a device is infected and there is sensitive information in it, like a file that store account password, wallet password, mnemonic seed, wallet file, there is big risk to be stolen cryptocurrency stored in that device.