Post #4251819
2026-07-30 20:03 UTC
Yet another attack against the Arch User Repository is underway. We are monitoring and analyzing the malware samples.
https://discourse.ifin.network/t/new-aur-attack-prompts-adoption-lock/698
#ThreatIntel #ThreatIntelligence #IFIN
Replies (2)
-
@nyanbinary@infosec.exchange 2026-07-30 21:08
@ifin@infosec.exchange wait they... had reopened adoption???
-
@ifin@infosec.exchange 2026-07-30 20:28
The easiest way to stop this attack (and the last one, btw) is to deny outbound Tor traffic and block downloads from archive.torproject[.]org in your environment. If the payloads can't do that, they can't continue past the first stage.