this post was submitted on 02 Jun 2025
11 points (100.0% liked)

Cybersecurity

7427 readers
5 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Community Rules

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities [email protected] [email protected] [email protected] [email protected] [email protected]

Notable mention to [email protected]

founded 2 years ago
MODERATORS
top 1 comments
sorted by: hot top controversial new old
[–] sugar_in_your_tea 3 points 6 days ago

This means an attacker is using a name from one platform to target users of another, a rarely seen tactic.

Really? That sounds like a pretty obvious attack strategy.

I can think of a couple of ways to make this attack even more effective, with very little sophistication.

I don't understand why package signing isn't common on these platforms.