As cited
Copy frozen at (site build).
threat intel
North Korea’s job interview scam runs both ways
Attackers posing as employers are targeting Rust Project maintainers and popular library developers through fake video interviews to trick them into installing malware or compromising their accounts. The Rust Project's security teams flagged this recurring social engineering campaign, which uses job and collaboration offers as the lure. Victims' compromised credentials could enable attackers to publish malicious code to widely-deployed packages.
Why it matters: Open source maintainers and Rust developers are at risk of account takeover leading to supply chain attacks affecting downstream users; practitioners should educate their teams on this social engineering vector targeting software developers.
- Source published
- First seen by Cybersecurity Tracker