Bleeping Computer

Fake Microsoft Office add-in tools push malware via SourceForge

Threat actors are abusing SourceForge to distribute fake Microsoft add-ins that install malware on victims' computers to both mine and steal cryptocurrency. SourceForge.net is a legitimate software ...
CoinTelegraph

Hackers hide crypto address-swapping malware in Microsoft Office add-in bundles

A malware that swaps a victim's copied crypto wallet address with an attacker's is being included with Microsoft Office extension packages on SourceForge. Update April 9, 11:50 pm: This article has ...