3 ms·
Timeline reads like a "pig butchering" or romance scam. Except the goal is not money, but control. Attackers find a vulnerable but critical library in the supp
by xyst 3y ago
Timeline reads like a "pig butchering" or romance scam. Except the goal is not money, but control.
Attackers find a vulnerable but critical library in the supply chain. Do a cross check on maintainers or owners of the code (reference social media and other sources to get more information). Execute social engineering attack. Talk to maintainer(s) "off list" to gain rapport. Submit a few non-consequential patches that are easy to grep to gain trust. Use history of repository or mailing list against victim to gaslight ("last release was X years ago!1", "you are letting project rOt!", "community is waiting for you!").
- BuildTheRobots 3y agoI'm amazed more people aren't talking about the "off list" part or asking Colin if he's willing to provide those emails/conversations.
- xyst 3y agoThat’s more of a LEO concern. Maybe attackers got sloppy and leaked info in email headers?
- DrammBA 3y ago> Timeline reads like a "pig butchering" To me this is the polar opposite of pig butchering. This was a targeted and unromantic attack, unrelated to investing or cryptocurrency, the original maintainer was not "fattened like a hog" in any way, if anything he was bullied and abused into submission.