Windows Defender identifies Tailcat as infected with Trojan:Win32/Wacatac.H!ml
Nobody has claimed this yet.
Assessment
- Difficulty
- 3/5
- Estimated time
- Half a day
- Newbie friendliness
- 30/100
Research direction
The problem is the published Windows release archive tailcat_0.7.0_windows_amd64.zip, which Defender flags as Trojan:Win32/Wacatac.H!ml; the binary is built from this Go project's release pipeline. Start by checking how the release artifacts are built and whether they are signed, and reproduce the scan against the downloaded zip. Done means either a clean scan result or a submitted false-positive report to Microsoft, with the outcome recorded in the issue.
Written by the indexing model from the issue text.
Description
Defender link: https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?name=Trojan%3AWin32%2FWacatac.H!ml
C:\> winget install --scope user tailcat
Found tailcat [Tailscale.tailcat] Version 0.7.0
This application is licensed to you by its owner.
Microsoft is not responsible for, nor does it grant any licenses to, third-party packages.
Downloading https://github.com/tailscale/tailcat/releases/download/v0.7.0/tailcat_0.7.0_windows_amd64.zip
██████████████████████████████ 6.91 MB / 6.91 MB
An unexpected error occurred while executing the command:
0x800700e1 : Operation did not complete successfully because the file contains a virus or potentially unwanted software.
- Dominant language
- Go
- Stars
- 8.8k
- Forks
- 404
- Avg merge
- 3h 48m
- Merged PRs (30d)
- 1
Getting set up
This project ships no dev container, Dockerfile or contributing guide, so setting up is up to you: start from its README, and see our first-contribution guide for the general steps.
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from tailscale/tailcat
-
Difficulty 2/5 1-3 hours Newbie friendliness 69/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
-
macOS: tailcat's traffic goes through a co-located Tailscale exit node because netns is offPossibly taken @chphch claimed this today. Open
Difficulty 4/5 3-5 days Newbie friendliness 18/100
-
Difficulty 4/5 3-5 days Newbie friendliness 42/100
-
Difficulty 4/5 3-5 days Newbie friendliness 45/100
All issues in tailscale/tailcat
Similar issues
-
area: interop area: sip-core v3
Difficulty 2/5 1-3 hours Newbie friendliness 62/100
fonoster/routr#705 · 1 comment ·
Maintainers usually reply within 1 day
-
enhancement
Difficulty 2/5 1-3 hours Newbie friendliness 66/100
-
kind/bug require/reproduce require/severity
Difficulty 2/5 1-3 hours Newbie friendliness 66/100
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
oxc-project/tsgolint#1362 ·
Maintainers usually reply within 1 day
-
enhancement
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
hashicorp/terraform-provider-google#30703 ·
Maintainers usually reply within 1 day