Michaela

Malicious actors have embedded malware in fake Microsoft Office extension packages on SourceForge, attempting to steal crypto by swapping a victim’s copied wallet address with that of an attacker. A cybersecurity report from Kaspersky’s Anti-Malware Research Team has revealed that a listing on SourceForge, titled “officepackage,” contains genuine Microsoft Office add-ins bundled with hidden malware.