I was downloading a ISO file from Ubuntu and was just curious on some security questions concerning this process and after the download process. If I'm downloading a file can my file be infected while it's downloading? For example if someone else it browsing on a malicious site on my network and some malicious code spreads throughout my network, can a virus/malware infect my download? Lastly after my download is finished if I confirm the iso hashes and verify the hash files with their gpg key does this guarantee that my download was not infected whatsoever. If a virus did infect my download while it was downloading or if I downloaded from a malicious or unofficial link would the hases be different? This may be a stupid and paranoid heavy question but it just crossed my mind so I'd though I'd ask. Thanks!

1 Answer 1


No, a virus cannot infect your file while downloading.

The GPG key means that the ISO is as intended. There is a chance that the ISO was infected and Unbutu didn't know.

Yes, the hashes would be different. That's why they are used.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy