{"id":37280,"date":"2025-03-04T00:01:56","date_gmt":"2025-03-03T23:01:56","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=37280"},"modified":"2025-03-03T19:23:46","modified_gmt":"2025-03-03T18:23:46","slug":"is-simplewall-firewall-tool-compromised","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2025\/03\/04\/is-simplewall-firewall-tool-compromised\/","title":{"rendered":"Is SimpleWall Firewall tool compromised?"},"content":{"rendered":"

\"Stop[German<\/a>]A short warning to the readers of this blog who use SimpleWall as a firewall or tool for configuring the Windows Filtering Platform. A reader has informed me that the software has probably been hacked. I didn't found a proof, but there is a fact: The developer has archived the repository and is no longer developing it since then. In addition, a fake \"simplewall\" page has also appeared that aims to lure unsuspecting users.<\/p>\n

<\/p>\n

What is SimpleWall?<\/h2>\n

\"\"The free SimpleWall software is an extension that can be used as a supplement to the standard firewall used in Windows. The developer describes it as: Simple Windows Filtering Platform (WFP) configuration tool that can configure network activity on your computer.<\/em><\/p>\n

\"SimpleWall\"<\/a><\/p>\n

SimpleWall allows users to control all Internet traffic. Thanks to the clearly structured SimpleWall user interface, the set of rules is easy to configure.<\/p>\n

Repository archived since Feb. 19, 2025<\/h2>\n

The developer runs this GitHub site<\/a> on which SimpleWall is provided. A list of all features can also be viewed there. However, a banner appears on the GitHub page with the message \"This repository has been archived by the owner on Feb 19, 2025. It is now read-only.<\/em>\"<\/p>\n

I have not found a reason for this on GitHub. The Simplewall Has Been Discontinued<\/a> thread has been on Hacker News for a week, which assumes that development has been discontinued.<\/p>\n

Has SimpleWall been hacked?<\/h2>\n

A German blog reader contacte me the other day (thanks) and wrote: \"The website of the excellent 'simplewall' open-source firewall for Windows has been hacked. The operator has write-protected the GitHub repo on 02\/19\/2025.\"<\/p>\n

The reader said it might be worth a warning as there is no real alternative (open-source, lightweight, donation-funded with similar functionality and always evolving) on Windows. However, when skimming the GitHub page, I couldn't find anything about a hack and no explanation about the reason why the repository was archived.<\/p>\n

Anyone using the software should perform hash and especially GPG verification for downloads. The Pubkey is also hosted<\/a>\u00a0externally(!).<\/p>\n

New fake website<\/h2>\n

While writing this post, I also noticed a page with the URL simplewall[.]org.<\/p>\n

\"FakeSeite<\/p>\n

Here too, the blog reader pointed out to me that it was a fake page. The bug tracker refers to this problem in the entry Phishing website claiming to be Simplewall #1954<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"

[German]A short warning to the readers of this blog who use SimpleWall as a firewall or tool for configuring the Windows Filtering Platform. A reader has informed me that the software has probably been hacked. I didn't found a proof, … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[580,1547,2],"tags":[69,1544,194],"class_list":["post-37280","post","type-post","status-publish","format-standard","hentry","category-security","category-software","category-windows","tag-security","tag-software","tag-windows"],"_links":{"self":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/37280","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/comments?post=37280"}],"version-history":[{"count":1,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/37280\/revisions"}],"predecessor-version":[{"id":37281,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/37280\/revisions\/37281"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/media?parent=37280"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/categories?post=37280"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/tags?post=37280"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}