Linux Users Targeted by Cryptocurrency-Stealing Malware That Hits Snap Packages: Here’s How to Stay Safe

• Hackers hijack dormant Snapcraft apps to spread cryptocurrency-stealing malware
• Attackers exploit expired domains to reset passwords and update dumps with malicious code
• Malware imitates wallet apps, stealing recovery phrases and draining funds up to $490,000

Snapcraft is being overrun by hackers who are taking over dormant and inactive apps (“snaps”) and using them to steal people’s cryptocurrency, experts said.

“Scammers are waging a relentless campaign to post malware to the Canonical Snap Store. Some is detected by automated filters, but many slip through,” the Anchore cybersecurity researchers said.