Rust Team Members and Popular Crate Owners Targeted via Video Calls

Attackers are impersonating recruiters in video calls to trick Rust team members and popular crate owners into installing malware or executing malicious code under the guise of job offers. This campaign mirrors well-documented North Korean threat actor tactics (e.g., 'Contagious Interview' / Lazarus Group operations), where trusted developers in open-source ecosystems are prime targets due to their privileged access to widely-used packages. A compromised crate owner could introduce malicious code into dependencies affecting thousands of downstream projects. This matters because the supply chain impact extends far beyond the individual victim — a single successful compromise can cascade into a widespread software supply chain attack. Human manipulation, not technical exploitation, is the entry point, making technical defenses alone insufficient.