[tex-live] Possible security problem -- ctan mirrors at concertpass.com and hoobly.com

[Paul Romer]

Today, Tex Live Utility tried to connect to a ctan mirror at concertpass.com.
This seemed unusual.

I looked on the ​​status page at https://ctan.org/mirrors/mirmon and saw a
few other .com mirrors in the US:


​
A Virus Total scan of concernpass.com and mirrors.concertpass.com showed no
malware, but when I looked a little further, it looks like there were
suspect files at hoobly.com in the recent past:


​
I will look for another security related address to send this information,
but thought I should what I have now.

Paul Romer
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://tug.org/pipermail/tex-live/attachments/20180616/92d36afa/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: malware at hoobly-com.png
Type: image/png
Size: 288797 bytes
Desc: not available
URL: <http://tug.org/pipermail/tex-live/attachments/20180616/92d36afa/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ctan-mirrors.jpg
Type: image/jpeg
Size: 114449 bytes
Desc: not available
URL: <http://tug.org/pipermail/tex-live/attachments/20180616/92d36afa/attachment-0001.jpg>