{"id":110383,"date":"2023-10-02T13:59:52","date_gmt":"2023-10-02T11:59:52","guid":{"rendered":"https:\/\/prohoster.info\/?p=110383"},"modified":"2023-10-02T13:59:57","modified_gmt":"2023-10-02T11:59:57","slug":"v-ubuntu-snap-store-vyyavleny-vredonosnye-pakety","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/v-ubuntu-snap-store-vyyavleny-vredonosnye-pakety","title":{"rendered":"Malicious packages discovered in the Ubuntu Snap Store","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Canonical has announced a temporary halt to the automatic package review system in the Snap Store due to the emergence of packages containing malicious code aimed at stealing cryptocurrency from users. It remains unclear whether the incident is limited to the publication of malicious packages by third-party authors or if there are actual security issues within the repository itself, as the situation is described in the official announcement as a \"potential security incident.\" <\/p>\n
Details about the incident are promised to be disclosed following the investigation's conclusion. During the investigation, the service will be switched to a manual review mode, requiring all new snap package registrations to undergo manual verification before publication. This change will not affect the uploading and publishing of updates for existing snap packages. <\/p>\n
Problems have been identified in the packages ledgerlive, ledger1, trezor-wallet, and electrum-wallet2, released by malicious actors masquerading as official packages from the developers of the noted cryptocurrency wallets while having no actual relation to them. The problematic snap packages have been removed from the repository and are no longer available for search and installation using the snap utility. Incidents of malicious package uploads in the Snap Store have occurred before, for example, in 2018, when packages containing hidden code for cryptocurrency mining were detected in the Snap Store. \n Source: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"