1. Got a question or need help troubleshooting? Post to the troubleshooting forum or Search the forums!

Matter Control - MatterSlice.exe - Trojan.Tinba.ED

Discussion in 'Software' started by ToyDesigner, Jun 12, 2015.

  1. ToyDesigner

    ToyDesigner Member

    Joined:
    Apr 13, 2015
    Messages:
    32
    Likes Received:
    7
    I scanned all the various 3d printing software I have and this turned up. As matching the tiny code found in one of the smallest banking bots? Did anyone else have this issue.


    mattercontrol.JPG

    "The source code for Tinba, known as the smallest banker Trojan in circulation, has been posted on an underground forum. Researchers say that the files turned out to be the source code for version one of Tinba, which was identified in 2012, and is the original, privately sold version of the crimeware kit. Tinba performs many of the same malicious functions as other banker Trojans, injecting itself into running processes on an infected machine, including the browser and explorer.exe. The malware is designed to steal financial information, including banking credentials and credit-card data and also makes each infected computer part of a botnet. Compromised machines communicate with command-and-control servers over encrypted channels. Tinba got its name from an abbreviation of "tiny banker," and researchers say that it's only about 20 KB in size."
     
  2. ToyDesigner

    ToyDesigner Member

    Joined:
    Apr 13, 2015
    Messages:
    32
    Likes Received:
    7
    Not sure if its false positive due to similar code just thought I would share
     
  3. daniel871

    daniel871 Well-Known Member

    Joined:
    Apr 18, 2015
    Messages:
    1,322
    Likes Received:
    510
    Just another reason to ditch MatterControl and use Cura or Repetier host if not using Simplify3d.
     
  4. Printed Solid

    Printed Solid Volunteer Admin
    Staff Member

    Joined:
    Feb 21, 2013
    Messages:
    1,605
    Likes Received:
    1,003
    Have you reported this to mattercontrol? Seems like it warrants a response.
     
  5. ToyDesigner

    ToyDesigner Member

    Joined:
    Apr 13, 2015
    Messages:
    32
    Likes Received:
    7
    No just came up and posted it here to see if anyone else had it or knew about it incase it was just false positive.
     
  6. Jerry RoBo 3D

    Jerry RoBo 3D Administrator
    Staff Member

    Joined:
    Oct 28, 2013
    Messages:
    139
    Likes Received:
    126
    Matter Hackers says "This is almost certainly a misidentification of the MatterControl.exe by MalwareBytes, which happens from time to time since the process is entirely automated and aggressive. We'll need to contact them to get it unflagged." and a few minutes later, "Looks like one of our engineers already caught this and the resolution process is underway."
     
    mark tomlinson and Mike Kelly like this.
  7. mark tomlinson

    mark tomlinson ༼ つ ◕_ ◕ ༽つ
    Staff Member

    Joined:
    Feb 21, 2013
    Messages:
    23,912
    Likes Received:
    7,338
  8. Jerry RoBo 3D

    Jerry RoBo 3D Administrator
    Staff Member

    Joined:
    Oct 28, 2013
    Messages:
    139
    Likes Received:
    126
    Just heard back from MatterControl on this: "FYI - Malwarebytes confirmed they'll be pushing an update in the next 24 hours that takes us off the list."
     
    ToyDesigner and mark tomlinson like this.

Share This Page