Cybercriminals are targeting crypto users by exploiting SourceForge, a well-known open-source software platform.
According to security experts at Kaspersky, malicious attackers upload fake Microsoft Office installers packed with hidden malware, including crypto miners and clipboard hijackers, to deceive unsuspecting users.
They noted that while the SourceForge project pages appear legitimate, the danger lies in their auto-generated subdomains. In one instance, Russia’s Yandex search engine indexed a fake domain, leading unsuspecting users to a page filled with counterfeit Office tools and download buttons.
Sample Search Query Results on SourceForge. (Source: SecureList)
Data from Kaspersky indicates that more than 4,600 incidents were recorded in the first quarter of 2025, with 90% of the affected users in Russia.
It was unclear if this attack had led to significant financial losses for crypto users.
The attack
In this attack, the hackers upload weaponized software to SourceForge’s
We współpracy z: https://cryptoslate.com/crypto-users-targeted-in-sourceforge-malware-attack-via-fake-microsoft-office-softwares/
