Hackers Weaponize KeePass Password Manager

Comments (1)

fwn · 2h ago

> The attack ... involved modifying and re-signing KeePass installers with trusted certificates to deliver a custom malware loader ... The infection chain began with malvertising campaigns on popular search engines ... directing users to fraudulent download pages ...

I have my own issues with KeePass, but, to be fair, this was not a KeePass problem. It was a trust problem, starting with search ads and ending in tricking users to install a fake app.

If anything, threat actors "weaponized" irresponsible advertising.

Hacker News Anti-Paywall (greasyfork.org)

NASA's Voyager 1 Revives Backup Thrusters Before Command Pause (jpl.nasa.gov)

Where is the boundary between the physical and the virtual world? (oliverdzedou.com)

Cheap context-aware translations of reviews, comments and everything else (batchtranslation.com)

Why Our CTO Banned Rust After One Rewrite (old.reddit.com)

Severed Fingers and 'Wrench Attacks' Rattle the Crypto Elite (wsj.com)

As Nuclear Power Makes a Comeback, South Korea Emerges a Winner (bloomberg.com)

Stateful Connection with Spoofed Source IP – NetImpostor (tastypepperoni.medium.com)

How AI made your life worse (miserablyemployed.com)

Voyager 1 Comes Back to Life After 15B Miles's Space Miracle (youtube.com)

Building UI's that behave like video games

A letter from the M&S hackers landed in my inbox – this is what happened next (bbc.com)

Sebastián Velasco's Painting (sebasvelasco.com)

Cheap mini PCs have gotten good (world.hey.com)

Shifty – A brand new Adam Curtis series [video] (youtube.com)

Why Susan Fowler blew the whistle on sexism at Uber (2020) (theverge.com)

Why Starbucks helps mom and pop coffeehouses. (2007) (slate.com)

A Data-Oriented Resume (van-sprundel.org)

Inigo Quilez: computer graphics, mathematics, shaders, fractals, demoscene (iquilezles.org)

Can Britain's neighbours help it keep the lights on? (ft.com)

The Age of Shoddy (historynet.com)

Telegram's Extraordinary Business Model (softpagecms.com)

Craft Basic (Windows 95 and up) (lucidapogee.com)

Amazon Mechanical Turk (mturk.com)

What does the end of mathematics look like? (awanderingmind.blog)

Tacking (en.wikipedia.org)

Show HN: Infrabot UI, create and visualize infrastructure using natural language (twitter.com)

Backlash Against US Government's Block on Huawei's HarmonyOS (harmonyoshub.com)

An engineer's brutally honest pitch for his Typeform alternative (forms.md)

SQL OFFSET is worse than keyset pagination (use-the-index-luke.com)

How the Heck Do QR Codes Work? (An Interactive Exploration) (perthirtysix.com)

VACE: An all-in-one model designed for video creation and editing (wavespeed.ai)

Iceland's shorter working week has been a success (theguardian.com)

Looking for a FiveM HWID spoofer? I found a free one (helenuvjfz.github.io)

Maybe we should be designing for machines too (substack.com)

SciCom Wiki (arxiv.org)

I Yelled My MVP Idea and Got a FastAPI Back End in 3 Minutes (rafaelviana.com)

'Ghost brokers' haunting the insurance market (financial-ombudsman.org.uk)

Nvidia RTX 5060 is up to 25% faster than RTX 4060 (tomshardware.com)

Top HWID Spoofers for 2025 (helenuvjfz.github.io)

A DoorDash driver scammed the company out $2.5M (theverge.com)

Visual AI Workspace: Create a Month of Content in Hours (go.nodeflowai.com)

Show HN: A curated list of fun and flashy text animation libraries

Trump wants coal to power AI data centers (cnbc.com)

Best Valorant HWID Spoofer (github.com)

Noe – The Synthetic Conscious Pixel (gist.github.com)

OpenAI CodeX [Update 2025] (chatgpt.com)

Why Retina Isn't Enough (2012) (cultofmac.com)

Bad Type Patterns – The Duplicate Duck (schneems.com)

'Garage Mahals' Are Driving Neighbors Nuts (wsj.com)

Hackers Weaponize KeePass Password Manager

Comments (1)