Snaps are compressed, cryptographically signed, revertable software packages for Linux desktops, servers, and embedded devices.
A sophisticated campaign targeting Canonical’s Snap Store has escalated dramatically, with threat actors shifting from publishing malware under new accounts to hijacking established publishers through expired domain takeovers.
This represents a fundamental erosion of trust signals that Linux users previously relied upon when installing snap packages.