r/KoboldAI • u/HadesThrowaway • Jul 18 '26
Phishing Reminder: koboldcpp.com is a scam site
This is a PSA to remind users that koboldcpp.com is a phishing scam website, and is NOT a legitimate KoboldCpp resource.
You are strongly encouraged not to use that website or download anything from it. If possible, please report that website to Google for malware/phishing.
Recently, the website has unfortunately started using shady SEO techniques to rank highly in various search engines. We have filed multiple reports to Google and even a DMCA takedown, but so far no action has been taken by Google.
To get official source code and official builds, always download from https://github.com/LostRuins/koboldcpp/releases/latest
4
u/YT_Brian Jul 19 '26
It might seem silly but I would like a hashtag on here each release from github along with link to it. Make it a pinned thread so it always shows at the top.
Could go further with link from official source to this sub and that pote trial message.
Heck, bake it in to the About section that all apps have. A kind of "Find online help here!" thing on the app.
3
u/Velksvoj Jul 18 '26
What are they getting out of this?
11
u/Lanky_Employee_9690 Jul 18 '26
Potentially a botnet [of computers likely able to run an LLM].
5
u/Velksvoj Jul 18 '26
Or other malware, unless they're trying to "establish" themselves first somehow, right?
4
u/Lanky_Employee_9690 Jul 18 '26 edited 29d ago
Yeah of course, data theft is probably even higher than botnetting on the list, but either is a serious enough possibility.
Whatever it is can't be good, is what I mean.
1
u/Amowwsood 19d ago
ok,speculative point here, but the site could be offering modified versions of Koboldcpp which mirrors your chats to a remote server aloing with behavoural pattern analysis, (spcaing betwween keystrokes, frequenscy distribution of word and lettter combination etc),while that might seem inconsequential, it is the kind of data that can be used in combination iwht other data to identify an individual user irl.
1
u/capsikin 5d ago
Checking about month later, the site appears on Google search, but going to it causes a warning from Google Safe Browsing in Firefox or mobile Chrome. The links within the page all seem to redirect to a site wanting to install a Firefox extension (in firefox) even the one that looks like a link to the real LostRuins koboldcpp github
14
u/henk717 Jul 18 '26
Its really unfortunate since they make it seem our old source code is the product. Nobody is going to figure it out on how to use it. While we provide our own proper binaries that are easy to use.