Evolution of Web3 in Cloud Supply Chain Attacks
Unit 42 says DPRK-linked actors use Web3 smart contracts as C2 for npm worms stealing cloud credentials.
78
Product
arrayref
- Mentions · 7d0
- Mentions · 30d1
- All mentions5
- First seenAug 20, 2026
- Last mentioned23d ago
Timeline
5 articles · newest firstRust Team Members and Popular Crate Owners Targeted via Video Calls
A social engineering campaign targets Rust developers via video calls to steal credentials and deploy malicious packages.
65
Rustaceans warned of job interviews with a malicious payload
Rust project warns attackers use fake recruiter interviews targeting crate owners to deploy RATs and compromise the package ecosystem.
62
Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads
Compromised maintainer account published malicious versions of popular Rust crates with 245M downloads, delivering a build-time payload via typosquatted proc-macro1 dependency.
82
Rust Supply Chain Attack on arrayref: Significant Overlap with DPRK Campaigns
Malicious versions of the Rust crate arrayref executed a compile-time backdoor, with infrastructure overlapping recent DPRK supply chain attacks on Mastra and axios.
72
Appears with
- Wizvendor · 2
- axiosproduct · 2
- Rustvendor · 2
- Rustproduct · 2
- DPRKthreat actor · 1
- LinkedInorganization · 1
- crates.ioorganization · 1
- append-only-vecproduct · 1
- Shai-Huludmalware · 1
- Rust developersvictim · 1
- Rust Projectorganization · 1
- Mastraproduct · 1
- Kasperskyorganization · 1
- Alluring Piscesthreat actor · 1
- Sapphire Sleetthreat actor · 1
- internmentproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.