Back Feeds2.Feedburner

Linux users targeted by crypto thieves via hijacked apps on Snap Store

Feeds2.Feedburner •Zeljka Zorz • January 21, 2026

Cryptocurrency thieves have found a new way to turn trusted software packages for Linux on the Snap Store into crypto-stealing malware, Ubuntu contributor and former Canonical developer Alan Pope warned. SnapScope web app identifies malicious snaps (Source: Alan Pope) Instead of creating new accounts on this Canonical-run package repository, the attackers are taking over expired web domains and associated email servers tied to existing Snap Store publishers, and using that access to hijack their Snapcraft … More →

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Hackers Target Linux Snap Store with Crypto-Malware Hackers have exploited Snapcraft, the app store for Ubuntu and other Linux distributions, to inject malicious code into software packages. By hijacking expired domains and associated email servers of existing Snap Store publishers, attackers are turning trusted applications into crypto-stealing malware. This threat has been highlighted by Ubuntu contributor Alan Pope. 4 sources 21

Linux users targeted by crypto thieves via hijacked apps on Snap Store

The full story

Extracted Entities

Attack Types (1)

Platforms (2)