Be alert: targeted attacks on prominent Rustaceans
crates.io security team warns of an ongoing social engineering campaign targeting Rust crate maintainers via fake video calls to steal accounts and publish malware.
The crates.io security team and Adam Harvey warn of an active campaign targeting rust-lang members and owners of popular crates. Attackers lure targets with video calls offering jobs, projects, or contracts, then trick them into installing a purportedly missing audio codec or executing a command placed on the clipboard. The goal is to compromise devices and maintainer accounts in order to publish malware to the crates.io ecosystem.
68