Sep 17, 2026, 6:02 PM> Be alert: targeted attacks on prominent Rustaceans
Alert: You might be a prominent Rustacean without noticing
- Sep 17, 2026, 6:02 PM
Replies
Mathiasstudiolo_rb@mastodon.onlineSep 17, 2026, 8:22 PM@blyxyas e.g., the Contagious Interview attack: You are offered a job, you get the assignment to work on a repository for the interview, but it contains a build.rs that downloads a trojan, executes it, and makes it persistent once you do your first build. And from your machine it infects your future commits to other repos.
- Sep 18, 2026, 3:12 PM
@studiolo_rb Now that you say it, I could have fallen victim to one of these.
It was an interview for a company I had applied for before, and the email was legit and the whole process was documented on their webpage, but looking back on it, it was suspicious nonetheless.
"Yeah, we don't do a normal interview process, we like seeing you in action! Clone the repo at <company>-hiring/exam and try fixing it!"
That could've been a trojan! It was a couple years ago and nothing happened, but the risk was there nonetheless. I've since changed distros and wiped out all my drives a bunch of times, so I think I'm safe
llogiqllogiq@hachyderm.ioSep 19, 2026, 8:57 AM@blyxyas @studiolo_rb I apparently am famous enough to have been targeted for a phishing attack of that kind twice in the last two weeks.