44m atrás
Hackers Take Over Snap Store Publisher Accounts to Deliver Crypto-Stealing Linux Malware
Cryptocurrency-focused attackers are compromising existing publisher accounts on Canonical's Snap Store to turn previously legitimate Linux packages into crypto-stealing malware. By taking control of expired developer domains and email addresses, they push malicious updates that harvest wallet recovery phrases, exposing users to fund theft before Canonical removes the snaps. Security researcher Alan Pope warns that these incidents highlight weaknesses in Snap's trust model and urges stronger account verification, domain monitoring, and wider use of two-factor authentication.