Malicious Go “crypto” Module Steals Passwords and Deploys Rekoobe Backdoor

An impersonated golang.org/x/crypto clone exfiltrates passwords, executes a remote shell stager, and delivers a Rekoobe backdoor on Linux.

firelizzard 7 points 8 months ago

So… don’t import random modules. Be sure the module you’re importing is the one you intend to import. That already should have been obvious.

path: 0 22371028, hotness: undefined, score: 7, children: 0

@programming.dev

This is a community dedicated to the go programming language.

Useful Links:

Rules:

Posts must be relevant to Go
No NSFW content
No hate speech, bigotry, etc
Try to keep discussions on topic
No spam of tools/companies/advertisements
It’s OK to post your own stuff part of the time, but the primary use of the community should not be self-promotion.

go to feed...

@programming.dev

This is a community dedicated to the go programming language.

Useful Links:

Rules:

Posts must be relevant to Go
No NSFW content
No hate speech, bigotry, etc
Try to keep discussions on topic
No spam of tools/companies/advertisements
It’s OK to post your own stuff part of the time, but the primary use of the community should not be self-promotion.

go to feed...