Source: https://news.bitcoin.com/hackers-exploit-fake-microsoft-office-add-ins-to-spread-crypto-miner-and-wallet-stealing-trojan/

Kaspersky researchers have recently issued a security alert regarding a sophisticated malware distribution scheme that has been uncovered on Sourceforge, a well-known software hosting platform. This scheme involves the creation of a project named "officepackage" by malicious actors. The project is designed to mimic legitimate Microsoft Office add-ins, but instead, it leads unsuspecting users to download malicious software onto their devices.

The attackers behind this scheme have employed a clever tactic to deceive users. They have set up a fake project page on Sourceforge that appears legitimate at first glance. When users click on the download link for the supposed Microsoft Office add-ins, they are redirected to a malicious website where the harmful software is hosted.

This type of malware distribution scheme is particularly dangerous because it preys