Rust maintainers urged to beware fake recruitment scams spreading malware
The Rust project has warned contributors and crate owners about fake recruitment approaches designed to compromise their devices and accounts. Attackers use convincing company profiles and video calls to trick targets into installing malware or running malicious commands, potentially threatening Rust’s package ecosystem.
The warning follows attacks including a June fake interview that nearly infected a maintainer’s computer with a remote-access trojan. An international advisory said similar North Korean operations compromised more than 30,000 devices and stole over $10 million, while malicious versions of the widely downloaded arrayref crate were briefly published in August after a maintainer’s credentials were apparently compromised.
- Fake recruiters are targeting Rust developers with malware.
- Attackers use plausible companies and booby-trapped video interviews.
- Compromised packages could spread malware across Rust’s ecosystem.
Americas Business Companies World
Read the full article at the source →
Originally published by The Register as “Rustaceans warned of job interviews with a malicious payload”.