They have bundled malware from the main downloads on their own site multiple times over the years, and even denied it and tried gaslighting people that AVs were giving false positives because AV companies are paid off by other corporations. And the admin will even try to delete the threads about this stuff but web archive to the rescue...

https://web.archive.org/web/20180623190412/https://forum.filezilla-project.org/viewtopic.php?t=48441#p161487

[–] [email protected] 3 points 5 months ago* (last edited 5 months ago) (1 children)

You know what? I didn't believe you, since I'm using it for a long time on Linux and never had any issues with it. Today, when I helped a friend (on Windows) with some SFTP transfer and recommended FileZilla was the first time I realised the official Downloads page provides Adware. The executable even gets flagged by Microsoft Defender and VirusTotal. That's actually REALLY bad. Isn't FileZilla operated by Mozilla? Should I stop using it, even though the Linux versions don't have sketchy stuff? It definitely leaves a really bad taste.

[–] [email protected] 3 points 5 months ago* (last edited 5 months ago)

Yeah, it's bad. Surprised they're still serving that crap in their own bundle but i guess some things don't change.

Filezilla is no relation to mozilla. But yeah i moved away from it years ago. The general recommendation I've seen is "anything but filezilla". Personally i use winscp for windows, and will have to figure out what to use when i switch my daily driver to Linux.