
I got targeted: Trying to get your credentials via a git post-checkout hook
A fake client shared a Dropbox git repo whose post-checkout hook fetched and executed a remote binary.
1
2 stories, newest first · one card per story

A fake client shared a Dropbox git repo whose post-checkout hook fetched and executed a remote binary.

A social engineering campaign targets Rust developers via video calls to steal credentials and deploy malicious packages.
Today 1.6K readers · 2.5K views · 779 reads · all time 189K views