North Korean Hackers Linked to Rust Supply Chain Attack Targeting Popular Utility
Cybersecurity firm Wiz has reported that North Korean hackers are responsible for a new open-source software (OSS) supply chain attack within the Rust ecosystem. The attack, which occurred on August 20, targeted 'arrayref,' a widely used array-conversion utility with over 245 million downloads, present in approximately 75% of Rust environments. A malicious package version, `[email protected]`, was pushed to crates.io from the legitimate maintainer's account. Shortly after, poisoned versions of 'internment' and 'append-only-vec,' two other crates from the same owner, were also released. These packages, along with attacker-owned crates, referenced a malicious dependency, `[email protected]`, which impersonated the legitimate 'proc-macro2' package. This dependency contained a malicious file, 'build.rs,' designed to fetch a platform-specific second-stage binary over TLS after disabling certificate validation. The Rust Security Response Team removed the malicious packages approximately 86 minutes later and conf... 
