Linux users targeted as crypto-stealing malware hits Snap packages – here’s how to stay safe

• Hackers hijack dormant Snapcraft apps to spread malware that steals cryptocurrency
• Attackers exploit expired domains to reset passwords and update snaps with malicious code
• Malware impersonates wallet apps, steals recovery phrases and drains funds up to $490,000

Snapcraft is being invaded by hackers who take over dormant and inactive apps (‘snaps’) and use them to steal people’s cryptocurrency, experts have said.

“There is a relentless campaign by fraudsters to publish malware on the Canonical Snap Store. Some are caught by automated filters, but plenty slip through,” said cybersecurity researchers at Anchore.