Rust Team Members and Popular Crate Owners Targeted via Video Calls
A social engineering campaign targets Rust developers via video calls to steal credentials and deploy malicious packages.
An ongoing social engineering campaign targets Rust-lang team members and popular crate owners via video calls. Attackers lure targets with job offers, then trick them into installing malicious software or executing clipboard code. The campaign is linked to North Korean threat actors and has previously compromised crates.
- Attackers lure Rust developers into video calls under false job offers to hijack credentials.
- Malicious code is delivered via clipboard paste or fake software under the pretext of a missing audio codec.
- The campaign is linked to North Korean threat actors and prior incidents targeting Rust developers.
- Defenders are urged to verify contacts, use trusted platforms, and enable multi-factor authentication.
- ATT&CK
- T1566.001 Spearphishing AttachmentT1539 Steal Web Session CookieT1528 Steal Application Access TokenT1552.001 Credentials In FilesT1598 Phishing for Information
- Vendors
- Fortinet
- Organizations
- Rust Projectcrates.ioSecurityWeekLinkedInKaspersky
- Countries
- North Korea
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | crates.io | ck developer credentials and deploy malicious packages. The crates.io team and the security response working group issued the war |
From the original article
1 min read at securityweek.com
It’s unclear if the attacks are part of previous campaigns against Rust, but the techniques used by the attackers match those used by North Korea. The post Rust Team Members and Popular Crate Owners Targeted via Video Calls appeared first on SecurityWeek.
By Eduard Kovacs · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.