[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fT00GbInAWRV8fduwDEW9GAShB1jGBCsNdyApGVTYsqw":3},{"article":4,"iocs":50,"watch_terms":51,"solutions":52,"lesson":137},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":27,"category":28,"article_tags":32},"48acd027-8cb7-4992-b27a-91a4bde2df3d","Rust Team Members and Popular Crate Owners Targeted via Video Calls","rust-team-members-and-popular-crate-owners-targeted-via-video-calls-5cb8b0","It’s unclear if the attacks are part of previous campaigns against Rust, but the techniques used by the attackers match those used by North Korea. The post Rust Team Members and Popular Crate Owners Targeted via Video Calls appeared first on SecurityWeek.","The Rust project has warned of a social engineering campaign targeting its team members and popular crate owners. Attackers use fake job offers in video calls to trick victims into installing malicious software or executing code. This campaign shares similarities with previous attacks linked to North Korean threat actors, though a direct link to ongoing campaigns is unconfirmed.","Rust project members and popular crate owners targeted via video calls for credential theft.","https:\u002F\u002Fwww.securityweek.com\u002Frust-team-members-and-popular-crate-owners-targeted-via-video-calls\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2025\u002F01\u002Fapplication-security-vulnerabilities.jpeg","2026-09-21T11:57:35+00:00","2026-09-21T12:00:44.120553+00:00",8,[17,20,22,25],{"name":18,"type":19},"Rust","product",{"name":21,"type":19},"crates.io",{"name":23,"type":24},"North Korea","threat_actor",{"name":26,"type":19},"arrayref","26b0b636-0e31-4db1-bffb-61bdf9f20a58",{"id":27,"icon":29,"name":30,"slug":31},null,"Supply Chain","supply-chain",[33,35,40,45],{"category":34},{"id":27,"icon":29,"name":30,"slug":31},{"category":36},{"id":37,"icon":29,"name":38,"slug":39},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":41},{"id":42,"icon":29,"name":43,"slug":44},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":46},{"id":47,"icon":29,"name":48,"slug":49},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18,21,26],{"controls":53,"vendors":136},[54,83,109],{"slug":55,"name":56,"problem":57,"products":58},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",[59,67,75],{"vendor_slug":60,"vendor_name":61,"vendor_logo":62,"product_slug":63,"product_name":64,"url":65,"description":66},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":71,"product_name":72,"url":73,"description":74},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","duo","Cisco Duo","https:\u002F\u002Fduo.com\u002F","MFA and device trust, with support for passkeys and security keys.",{"vendor_slug":76,"vendor_name":77,"vendor_logo":78,"product_slug":79,"product_name":80,"url":81,"description":82},"yubico","Yubico","\u002Fvendor-logos\u002Fyubico.png","yubikey","YubiKey","https:\u002F\u002Fwww.yubico.com\u002Fproducts\u002F","Hardware security keys for FIDO2, passkeys and smart card login, in USB and NFC versions.",{"slug":84,"name":85,"problem":86,"products":87},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[88,96,104],{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":92,"product_name":93,"url":94,"description":95},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-identity","Microsoft Defender for Identity","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-defender-for-identity","Detects attacks against on-premises Active Directory and hybrid identities.",{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":101,"url":102,"description":103},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-identity-protection","Falcon Identity Protection","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fnext-gen-identity-security\u002Fidentity-protection\u002F","Detection of identity attacks against Active Directory and Entra ID, with risk-based MFA.",{"vendor_slug":60,"vendor_name":61,"vendor_logo":62,"product_slug":105,"product_name":106,"url":107,"description":108},"identity-threat-protection","Okta Identity Threat Protection","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fidentity-threat-protection\u002F","Continuous risk assessment of sessions after login, with automatic actions such as ending sessions.",{"slug":110,"name":111,"problem":112,"products":113},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",[114,121,128],{"vendor_slug":115,"vendor_name":116,"vendor_logo":117,"product_slug":115,"product_name":118,"url":119,"description":120},"sosafe","SoSafe","\u002Fvendor-logos\u002Fsosafe.png","SoSafe Awareness Platform","https:\u002F\u002Fsosafe-awareness.com\u002F","Behaviour-based awareness training and phishing simulation in many languages.",{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":110,"product_name":125,"url":126,"description":127},"knowbe4","KnowBe4","\u002Fvendor-logos\u002Fknowbe4.png","KnowBe4 Security Awareness Training","https:\u002F\u002Fwww.knowbe4.com\u002Fproducts\u002Fsecurity-awareness-training","Training library and simulated phishing with reporting.",{"vendor_slug":129,"vendor_name":130,"vendor_logo":131,"product_slug":132,"product_name":133,"url":134,"description":135},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-sat","Huntress Managed Security Awareness Training","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fsecurity-awareness-training","Security awareness training and phishing simulation, managed for you.",[],{"slug":138,"title":139,"body":140,"framework_refs":141,"framework_notes":151},"rust-developers-targeted-by-north-korea-linked-social-engineering-via-fake-video-job-interviews","Rust Developers Targeted by North Korea-Linked Social Engineering via Fake Video Job Interviews","Attackers are impersonating recruiters in video calls to trick Rust team members and popular crate owners into installing malware or executing malicious code under the guise of job offers. This campaign mirrors well-documented North Korean threat actor tactics (e.g., 'Contagious Interview' \u002F Lazarus Group operations), where trusted developers in open-source ecosystems are prime targets due to their privileged access to widely-used packages. A compromised crate owner could introduce malicious code into dependencies affecting thousands of downstream projects. This matters because the supply chain impact extends far beyond the individual victim — a single successful compromise can cascade into a widespread software supply chain attack. Human manipulation, not technical exploitation, is the entry point, making technical defenses alone insufficient.",[142,143,144,145,146,147,148,149,150],"CIS Control 14: Security Awareness and Skills Training","CIS Control 16: Application Software Security","NIST SP 800-161: Supply Chain Risk Management","NIST SP 800-50: Building an Information Technology Security Awareness and Training Program","NIST CSF ID.SC-3: Suppliers and third-party partners are identified","NIST CSF PR.AT-1: All users are informed and trained","SLSA Supply Chain Levels for Software Artifacts (Level 3+)","OpenSSF Scorecard: Two-party code review requirement","ITIL Service Management: Change Control Process",{}]