Over 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF Rootkit (opens in new tab) 🚀Performance Engineering

thehackernews.com··Cited by 1 article·Covers: AUR Packages Attacked by Infostealer, Attackers Hijack Trusted AUR Packages to Deliver Rootkit Malware +1 more·Open original

Attackers took over more than 400 packages in the Arch User Repository (AUR) this week and rewrote their build scripts to install a credential stealer on any machine that built them. The malware is a Rust binary built to harvest developer secrets. When it lands with root, it can also load an eBPF rootkit to hide itself. The AUR is Arch Linux's community package collection, and it is separate

Read the original article

Sign in to keep reading the full article.

Sign Up Log In

Cited by 1 article

Atomic Arch: 400+ AUR Packages Backdoored with eBPF Rootkit and Credential Stealer

latesthackingnews.com·