Be alert: targeted attacks on prominent Rustaceans

There is an ongoing campaign targeting rust-lang community members and maintainers of popular crates that aims to compromise devices and accounts to publish malware. Attackers arrange seemingly legitimate video calls - framed as job interviews, project meetings, or contract discussions - and use them to trick targets into installing software (for example, a purportedly missing audio codec) or executing commands delivered via mechanisms like clipboard injection. Adversaries create plausible company profiles and LinkedIn presences to pass casual inspection. Similar intrusions affected many prominent Rust developers in June and led to a brief compromise of the arrayref crate last month. This style of attack has been observed beyond Rust and is associated with DPRK activity.

Take immediate precautions: treat cold outreach with suspicion, prefer calls on trusted platforms (ideally ones you set up), and avoid executing unfamiliar installers or pasted commands. Verify account security - enable multi-factor authentication, check for unexpected logins or session activity, and confirm account settings look normal. For assistance with crates.io accounts, contact [email protected]; for other security concerns, contact [email protected]. The team is available to help investigate and remediate suspected compromises.