Doctor Web discovers multi‑stage trojan in C++ developers' builds

The article discusses a multi-stage supply chain trojan identified by Doctor Web that targets software developers, specifically those working with C++ and C#. The malware infects project files and spreads through poisoned builds, leading to data theft, clipboard hijacking, cryptocurrency mining, and backdoor access.

The infection process involves three phases: a loader that injects itself into executables, a downloader that retrieves command server details via trusted platforms, and a backdoor that establishes extensive control over the compromised systems. Developers are encouraged to employ rigorous scanning and monitoring to mitigate the risks associated with this evolving threat.