
If you go back to FileZilla’s download page, you’ll notice you missed their little disclaimer “This installer may include bundled offers.

Ummm, I really just wanted an FTP client… Furthermore, Speedial may track software which might try to prevent you from changing your homepage, new tab or default search engine, a change to which you consent and choose to conduct … Speedial reserves the right to add additional features or functions to the Speedial Software.” “Preventing Unauthorized Use: In order to protect you from potentially unwanted software, Speedial tracks and monitors whether other applications have tried to change your homepage, new tab page or default search engines and notifies you when such changes occur. Oh, and let me quote something from the totally absurd terms of service on the right: Instead, you have to click 'Skip’ which is in the location of the cancel or go back option in most installers. I would have just unchecked the box and continued on, clicking the accept button without realizing that the checkbox was prefaced with 'also’ and that I was still getting a Yahoo homepage. This Sourceforge malware installer by default makes Yahoo your homepage on Safari, Chrome, and Firefox, and makes Yahoo your tab page in Safari and installs a commercial cloud backup solution called ZipCloud.

If you go to the homepage and click the big, bright green download button that says “Download Now - Sourceforge - Trusted for Open Source” like I did without noticing the “may include bundled offers” disclaimer, you’re not actually downloading FileZilla, you’re downloading Sourceforge’s installer which presents bundled offers and then downloads the actual binary file you’re looking for. Using an open-source FTP client like FileZilla sounds nice, right? Not only does the installer make some insecure connections, you also get some malware!
