Bleeping Computer

Fake Microsoft Office add-in tools push malware via SourceForge

Threat actors are abusing SourceForge to distribute fake Microsoft add-ins that install malware on victims' computers to both mine and steal cryptocurrency. SourceForge.net is a legitimate software ...
CoinTelegraph

Hackers hide crypto address-swapping malware in Microsoft Office add-in bundles

Update April 9, 11:50 pm: This article has been updated to include a response from the president of SourceForge, Logan Abbott. Malicious actors are attempting to steal crypto with malware embedded in ...