Linux Foundation Leader Impersonated in Slack Attack on Open Source Developers

A targeted social-engineering campaign is actively infiltrating Slack communities for open-source developers, impersonating known maintainers to phish credentials and convince victims to install a malicious root certificate (or, on macOS, run a downloaded binary named "gapi"), enabling TLS interception and potential full system compromise; OpenSSF advises stricter identity verification, avoiding unsolicited certificates/binaries, disconnecting and rotating credentials if compromised.