For anyone confused by this Twitter sound bite, the story is that there are 2 main sites from which you can download KeePass Password Safe (the free, open-source password manager):
- https://keepass.info/ is the official site, which ironically uses a suspicious-looking .info top-level domain, but is in fact the legitimate source
- https://keepass.com/ is an unofficial site which the Twitter article is reporting as spreading malware, but has somehow obtained the more legitimate-sounding .com top-level domain
And by the way, both of these sites come up on the first page of a Google search for "KeePass".
- https://keepass.info/ is the official site, which ironically uses a suspicious-looking .info top-level domain, but is in fact the legitimate source
- https://keepass.com/ is an unofficial site which the Twitter article is reporting as spreading malware, but has somehow obtained the more legitimate-sounding .com top-level domain
And by the way, both of these sites come up on the first page of a Google search for "KeePass".