SecurityWeek reports that individuals associated with the Rust project—including team members and maintainers of widely used crates—have been targeted through video calls. The exact nature of the attacks is not detailed, but the report notes that the methods used are consistent with those employed by North Korean threat actors.
The report does not confirm whether these incidents are part of a broader, ongoing campaign against the Rust ecosystem, or if they represent a new wave of activity. What is clear is that the attackers are focusing on high-value targets within the open-source community, likely seeking to compromise supply chains or gain access to maintainer credentials.
Because only one source is available, there is no independent corroboration or differing perspective to compare. The SecurityWeek article itself flags the uncertainty around attribution, noting that while the techniques match North Korea's playbook, the connection to prior Rust-targeted campaigns remains unconfirmed.