EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Lobsters·25d ago·5 min read
Be alert: targeted attacks on prominent Rustaceans
TL;DR
A targeted campaign is compromising Rust community members by using deceptive video calls to install malware. Attackers create fake company profiles to gain trust and execute their schemes.
✦ Why It Matters
Verify the legitimacy of any outreach and ensure your accounts are secure today.
Key Takeaways
- Be suspicious of unsolicited video calls.
- Verify the identity of new contacts before engaging.
- Ensure multi-factor authentication is enabled on accounts.
- Check for unusual login activity on your accounts.
Full Summary
There is an ongoing campaign aimed at members of the Rust programming community, particularly those involved with popular Rust packages, known as crates. Attackers are using video calls, initially set up for seemingly positive purposes like job opportunities, to trick targets into installing malware.
This is often done by convincing victims to download software under the guise of needing a missing audio codec or by executing commands through clipboard manipulation. To appear legitimate, these attackers create credible company profiles, including plausible LinkedIn accounts.
As a result, community members are advised to be cautious of unsolicited outreach and to verify the legitimacy of any communication. Ensuring that accounts have multi-factor authentication (MFA) enabled and checking for unusual login activity is also recommended.