A backdoor in a LinkedIn job offer
1–10 of 331 posts
Re: A backdoor in a LinkedIn job offer
#2Maybe Mac will finally get decent virtualization framework. Downloading random unprotected scripts from internet, like it is 1995 is getting old pretty fast.
Remember to use protection when meeting random people, and putting their junk deep inside your computer!
Re: A backdoor in a LinkedIn job offer
#3Isn't this how most NPM authors are hacked these days? I think the axios guy got hit with the same approach over LinkedIn.
Re: A backdoor in a LinkedIn job offer
#4I really want to know what would've happened with an npm install, I guess something boring like crypto mining or identity theft?
Re: A backdoor in a LinkedIn job offer
#5With how many desperate software engineers there are on the market right now looking for a job, there are going to be scumbags out there trying to take advantage of the desperation. Such people are the worst of the worst of humanity.
Stay vigilant out there everyone.
Re: A backdoor in a LinkedIn job offer
#6Maybe Mac will finally get decent virtualization framework. Downloading random unprotected scripts from internet, like it is 1995 is getting old pretty fast. Remember to use protection when meeting random people, and putting their junk deep inside your computer!
Or running random curl | bash scripts from GitHub, AUR, NPM are just as bad but many developers here still have dubious assumptions on this bad practice.
The last few weeks tell us how bad this is especially with all the mini-shai hulud's running around.
Re: A backdoor in a LinkedIn job offer
#7I really want to know what would've happened with an npm install, I guess something boring like crypto mining or identity theft?
Arbitrary remote code execution, maybe sold to the highest bidder like some shady cloud provider?
Re: A backdoor in a LinkedIn job offer
#8So, this is a crime right? Why isn't there a well known '911' for cybercrime to report things like this to and get help? Society needs to catch up with the actual dangers out there and build support networks for this ASAP. This is organized crime and needs organized defense to deal with it.
Re: A backdoor in a LinkedIn job offer
#9It’s odd that the operator of the scam knew full stack level details of its implementation. To me, it seems like they were targeting the author, perhaps as something like privilege escalation, identity escalation perhaps.
Re: A backdoor in a LinkedIn job offer
#10So, this is a crime right? Why isn't there a well known '911' for cybercrime to report things like this to and get help? Society needs to catch up with the actual dangers out there and build support networks for this ASAP. This is organized crime and needs organized defense to deal with it.
yes this is a crime.