Sylvain Kerkour personal blog

Backdooring Rust crates for fun and profit

Supply chains attacks are all the rage these days, whether to deliver RATs, cryptocurrencies miners, or credential stealers. In Rust, packages are called crates and are (most of the time) hosted on a central repository: https://crates.io for better discoverability. We are going to study 8 techniques to achieve Remote…
Points
362
HN comments
201
Submissions
1
Cited by
0 commenters

Security & PrivacySoftware Engineering2021

On Hacker News

SubmittedTitle on HNPointsComments
Nov 18, 2021Backdooring Rust crates for fun and profit by cjg362201

More from Sylvain Kerkour

All 17 posts →

Related posts from the same era