Skip to content

Google keyword brew points to a malicious site with false Homebrew install instructions #1074

@sastorsl

Description

@sastorsl
  • your problem was from running the official install or uninstall script?
  • you carefully read the output and it was not a git fetch or other connection issue to GitHub (that Homebrew has no control over)?
  • after installation: ran brew config and brew doctor and included their output with your issue? If you couldn't install: provided your OS version with the output of your issue?

What you were trying to do (and why)

Searched brew on Google search https://www.google.com/search?q=brew&oq=brew

What happened (include command output)

Got a Sponsored result at the very top pointing to a site at evernote.com, which in turn had, as far as I could tell, a malicious, base64 encoded string pointing to a site and IP-address which most definitely did not point to Homebrew.

I will not paste the contents directly so as not to propagate the malicious info further, but I have saved it (screenshot) and can share in a PM with a maintainer in this project.

Image
Command output
  
  

What you expected to happen

Expected to either get a search result for Homebrew or as often happens at least some beer brewing site...

Not sure if you have any viable action, but perhaps Google will listen to reason if you approach them and remove the result from their search.

Step-by-step reproduction instructions (by running brew commands)

Google search, see link above.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions