[tor-bugs] #14172 [Tor Browser]: duckduckgo search engine advertises download to non-official tor browser

["Tor Bug Tracker & Wiki" <blackhole@xxxxxxxxxxxxxx>]

#14172: duckduckgo search engine advertises download to non-official tor browser
-------------------------+--------------------------
 Reporter:  cypherpunks  |          Owner:  tbb-team
     Type:  defect       |         Status:  new
 Priority:  normal       |      Milestone:
Component:  Tor Browser  |        Version:
 Keywords:               |  Actual Points:
Parent ID:               |         Points:
-------------------------+--------------------------
 this is what i just reported as security related bug to duckduckgo:

 When searching for "Tor Browser", a sponsored link appears right on top:
 "tor.download-start.com", the real link goes to:
 "http://1671744.r.msn.com/?ld=d ... ctY46YrS1i2LYbzI&u=download-
 start.com%2fdownloads%2f104543"

 It then offers to download an .exe, which is not the original torbrowser,
 but contains some adware, maybe serious malware.
 This is an immense security thread to tor users, as they are seeking
 safety and privacy.
 Please remove the link, and please don't longer make business with these
 spammers.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/14172>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs