Tracked topic
Over 400 Arch Linux packages compromised to push rootkit, infostealer By Bill Toulas June 12, 2026 01:03 PM More than 400 packages in the Arch User Repository AUR are distributing a Linux rootkit and infostealer malware targeting credentials and access tokens. …
… D3Lab researcher Andrea Draghetti told BleepingComputer that, despite similarities to other Android malware that exploit NFC chips for data theft, NFCShare uses distinct code, libraries, architecture, and implementation details. …
… Analysis of compromised wallpapers revealed that the malware is bundled either directly in the package or inside password-protected archives that the user is tricked into opening. The payloads execute automatically the moment the user installs the wallpaper, the researchers say. …
… Microsoft researchers discovered the campaign and determined that the attack begins when users look for one of the aforementioned utilities and are presented with malicious links boosted in search rankings through SEO poisoning. …
… To mitigate this risk, users should ensure they are downloading Claude from the official portal and skip or hide sponsored search results. …