<story><title>Cybercriminals pose as &quot;helpful&quot; Stack Overflow users to push malware</title><url>https://www.bleepingcomputer.com/news/security/cybercriminals-pose-as-helpful-stack-overflow-users-to-push-malware/</url></story><parent_chain></parent_chain><comment><author>braiamp</author><text>I along with others, years ago, have said that answers that don&amp;#x27;t address the question asked should be removed. In this case, malicious actors are using packages that are not related to the problem presented in the question. This will become more prevalent than package squatting.</text></comment>
<story><title>Cybercriminals pose as &quot;helpful&quot; Stack Overflow users to push malware</title><url>https://www.bleepingcomputer.com/news/security/cybercriminals-pose-as-helpful-stack-overflow-users-to-push-malware/</url></story><parent_chain></parent_chain><comment><author>entuno</author><text>You could probably create a more convincing version of this with a bit of collusion between multiple accounts on StackOverflow.&lt;p&gt;If you have one person asking a deliberate question, someone else answering with a backdoored package that does actually does solve the problem, then a few accounts upvoting and adding comments it would lot a more more convincing than just a random answer with zero upvotes that doesn&amp;#x27;t actually solve the problem.</text></comment>