The Rust project warned of an active social engineering campaign targeting Rust team members and popular crate maintainers. Attackers pose as recruiters or contractors, lure developers into video calls, then trick them into installing software or running pasted code to steal credentials and publish malicious packages.
Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.
You get a LinkedIn message: “We’re hiring for a Rust contract role, can you jump on a quick video call?” Sounds great, right? Rust-lang warned: attackers are posing as recruiters, jumping on video calls, then telling crate maintainers to install a ‘missing audio codec’ or paste and run a command they drop into your clipboard. The goal is to hijack Rust developer credentials and push malicious crates, just like the earlier arrayref compromise. These fake companies even spin up convincing LinkedIn pages that pass a quick glance. If any interviewer asks you to install software or run commands during the call, stop immediately, end the call and report it to security before you touch your terminal.
The Rust Project warned that attackers are approaching Rust contributors and crate maintainers with believable recruiter outreach and “company” profiles, then using interview video calls to trick targets into installing malware or running commands. The activity is described as similar to North…
Microsoft reports that North Korean threat actors are using AI to make job scams, fake recruiter outreach, fraudulent worker identities, and targeted phishing campaigns faster and more convincing. One group posed as recruiters for a spoofed AI blockchain company and scheduled software-engineer…
Researchers observed a coordinated social-engineering operation (“Spring Ring”) where attackers used external Microsoft Teams accounts to pose as internal IT help desk staff and start voice calls. Victims were pressured to install remote-control tools (like Quick Assist or other RMM software) or…
Researchers say a North Korea-aligned group is targeting Web3 and crypto professionals with fake recruiter outreach and “mandatory” online skill tests. During the test, victims are tricked into copying a terminal command to “fix” a camera/mic error, which installs remote-access malware and can lead…
A financially motivated campaign in India used fake bank calls and WhatsApp links to persuade recent credit-card recipients to install malicious Android apps. The apps stole banking details and text messages, including one-time passwords, allowing criminals to support fraudulent transactions.
Researchers reported a real developer-targeting campaign linked to DPRK actors where attackers pose as legitimate recruiters or Web3 companies and trick targets into running code or pulling poisoned dependencies. The operation has now expanded to include malicious Terraform providers hosted in the…
