Bad actors have released a malicious version of the popular open source tool PuTTY to steal access credentials of computers worldwide. Unofficial version was compiled from the legitimate source, but isnt hosted on the official website project. Instead, attackers redirect users from a comprised website to their own site with that malicious version. The malicious version allows attackers to steal information related the connected computer/servers, including credentials used to access those systems. Users can also check that the size of the bad PuTty is larger in size than the official one.”]
Source: https://securityaffairs.co/wordpress/37013/cyber-crime/malicious-putty-in-the-wild.html