A fake Sublime Text website is surfacing on the web. Recently, the Twitter handle @MNThreatIntel brought this to light. The Malwarebytes Threat Intelligence organization (@MNThreatIntel) also asked Namecheap to cross the website sublimetext[.]me.
⚠️ Fake Sublime Text website at sublimetext[.]me
➡️ Payload: #DCRat
c90bd7b3e642eba0ab5a1153dde46a1c01131a773956f54801c7380ba037e6b6➡️ C2:
h925402f[.]beget[.]tech
185.50.25[.]13 pic.twitter.com/oF46GympL9— Malwarebytes Threat Intelligence (@MBThreatIntel) August 8, 2022
The interface of the fake website is similar to the original website. A screenshot of the fake website was shared in the post by Malwarebytes Threat Intelligence. There hasn’t been any official reports on the existence of the fake website and who’s it’s creator.
Sublimetext is a text editor for code, markup and prose. The editor features multi tab functionality in its interface. The editor supports many programming languages and markup languages.The functionality of the editor can be expanded with plugins that possess free software licenses. Plugins are facilitated with the use of Python API.
It was developed by Jon Skinner and Sublime HQ. The editor was released 14 years back on 18 January 2008.
The editor features 23 visual themes and additional themes can be installed through plugins. The editor has crossed development phases of 4 versions so far. The recent version Sublime Text 4 was released on 20 May 2021. The new version contained a Python 3.8 plugin host update.
As of now, the official Sublime Text authorities hasn’t made any announcement regarding the fake website surfacing on the web.
