Fake "GitHub Setup" download page pushes a suspicious Windows file

A site called gitappsdown[.]pro copies GitHub's look and offers a free "GitHub Setup" download for Windows. The giveaway: it hands you a password-protected file and shows you the password, which GitHub never does. Opening it can put malware on your computer. Download GitHub only from github[.]com.

The fake gitappsdown[.]pro page. It shows the download button and the archive password it tells visitors to use. Nothing was covered; the page shows no personal information.

Observed domain or link

gitappsdown[.]pro

What to do

Download GitHub and developer tools only from github[.]com.
Do not open or unzip a downloaded file that comes with a password shown on the website.
If you already opened it, disconnect from the internet, run a full antivirus scan, and change important passwords from a different device.

Share this warning

This alert is also on WatchOut, our shareable alert feed, with one-tap sharing and free email alerts.