[Misc] malware

[KihongHeo]

Hi,

Today some students asked how malware such as Trojan horse gets into the system. As I mentioned, traditionally, it has been spread via SW download from untrusted sources (e.g., illegal sites, black market, etc). But see this recent security issue that attackers intentionally bury malware in a well-known Github repository (php).

What can we trust and how to protect the systems?