Trust Hijacked: Hackers Seize Expired Domains to Poison Linux Snap Apps

A security advisory describes a campaign targeting the Canonical Snap Store where attackers register expired developer email domains, hijack the corresponding publisher accounts, and push malicious updates to otherwise-trusted Linux snaps. The tactic enables widespread automatic distribution of malware (notably to cryptocurrency wallet users) by exploiting lapsed domain registrations and weak account safeguards; the author urges domain maintenance and two-factor authentication and calls on Canonical to add protective controls.