[Cryptography] Is "drivers for foo" a major malware vector?

[mok-kong shen]

Long time ago I encountered something analogously curious that
I can now only sketch due to my fading memory: There was a free
software from xxx.org of US but the same software was also
downloadable from xxx.de for exactly the same version number. My
first thinking was naturally that xxx.de was a subsidiary of xxx.org.
But then I wondered why xxx.org took the trouble to establish a
subsidiary in Germany, since xxx.org didn't sale anything for profit
and on its webpage there was no mention at all of any subsidiaries
nor a recommendation that users in Germany or Europe should for speed
reasons preferably do downloading from xxx.de. I suspected thus that
xxx.de was a malware site, though I couldn't prove that.

M. K. Shen