Targeted attacks on prominent Rustaceans

The crates security team and Adam Harvey warned of a campaign against rust-lang participants and owners of popular crates. Attackers schedule video calls under the pretext of work or a project, then convince victims to install a 'codec' or run a clipboard command. In August, a successful attack hit the arrayref crate.

• Targets rust-lang participants and popular crate owners
• Scheme: video call under pretext of work or contract
• Victim asked to install 'codec' or paste command
• In August, attack on arrayref crate succeeded