North Korean Hackers Target Rust Developers with Job Scam

• •North Korean hackers are targeting Rust developers via job interview scams.
• •Over 30,000 devices have been infected globally, with significant credential theft.
• •Developers are urged to verify new contacts and be cautious of unsolicited job offers.

North Korean threat actors are conducting a social engineering campaign targeting members of the Rust Project and popular crate maintainers. The attackers lure victims into video calls under the pretense of job offers or collaborations, convincing them to install malicious software or execute harmful commands. This tactic has been linked to previous incidents, including a compromise of the arrayref crate in August 2026. The Rust team reported that over 30,000 devices have been infected globally, with more than 7,000 cryptocurrency wallets compromised between December 2025 and July 2026. The attackers create convincing company profiles to pass initial scrutiny and use various tricks to persuade targets into compromising their devices. Authorities have warned that stolen credentials may be used for extortion or to exfiltrate sensitive information. Developers are advised to be cautious of unsolicited job offers and to verify the legitimacy of new contacts.