OpenSSF Flags Malware Campaign on Slack Posing as Linux Foundation Figures

**OpenSSF warns of a targeted Slack phishing campaign** that impersonates community leaders to lure developers to a fake Google Workspace flow; victims are asked to provide credentials and install a malicious root certificate that enables encrypted-traffic interception, and macOS users may be served a 'gapi' payload capable of full system takeover. The campaign targeted the TODO Group Slack workspace, used a now-deleted Sites link and fake identifiers, and resembles prior developer-targeting operations reportedly linked to North Korean state-sponsored actors.