North Korean Hackers Target Rust Developers with Job Scam

• •North Korean hackers are targeting Rust developers through fake job offers.
• •Over 30,000 devices have been infected globally, with significant cryptocurrency theft.
• •Developers are urged to verify the legitimacy of outreach and secure their accounts.

North Korean threat actors are conducting a social engineering campaign targeting Rust developers and crate maintainers. The attackers lure victims into video calls under the pretense of job offers, tricking them into installing malware or executing malicious commands. The Rust Project's crates.io team issued a warning after similar attacks were reported in June and August, with over 30,000 devices infected across 100+ countries and 7,000 cryptocurrency wallets compromised. The attackers create fake company profiles to gain credibility and have been linked to the Contagious Interview (WaterPlum) threat group. Developers are advised to be cautious of unsolicited outreach and ensure multi-factor authentication is enabled.