Domain Resurrection Attacks Target Linux Users via Snap Store

Domain Resurrection Attacks Target Linux Users via Snap Store

First seen 24 Jan 2026, 03:39 UTC News.Risky.BizTechflowpostScworld 32.7

Article Content

Browse articles
ThreatCluster

Cybercriminals are exploiting expired web domains to hijack developer accounts and publish malware on the Canonical Snap Store, affecting Linux users. This technique, known as domain resurrection attacks, has already led to the compromise of at least two developer accounts, allowing the distribution of crypto-stealing malware through fake cryptocurrency wallet apps.