News for hackers. Stuff that matters.

A comment on Obsidian plugin was abused to deploy a remote access trojan. Parent comment

Re:Obsidian plugin was abused to deploy a remote access trojan by kepano on Monday May 11, 2026 @01:08PM (#48097673)
It's not one pop-up. To fully replicate the concept you have to agree on three separate screens (and these are not in quick succession):

1. exit restricted mode to allow third-party plugins

2. trust the author of the vault that's being shared with you

3. trust the plugins being shared with you via sync

[ Parent | on HN ]

There are no comments on this comment yet.