SECTOR PROFILE
Target Sector: Open Source Software & Linux Ecosystem
Court filings, technical advisories, and enforcement actions documenting cyber intrusions against Open Source Software & Linux Ecosystem organizations.
Key Facts
Total Cases
1
Prosecution records
Identified Losses
$150.0 million
Court & SEC estimates
- 1 documented prosecution cases targeting the Open Source Software & Linux Ecosystem sector.
- Cumulative reported financial losses exceed $150.0 million.
- Documented from federal indictments and SEC Form 8-K disclosures.
Documented Incidents
investigation 2024-03-29
XZ Utils liblzma Upstream Linux Supply Chain Backdoor (CVE-2024-3094)
Sophisticated multi-year social engineering and software supply chain operation where persona Jia Tan gained co-maintainer status on the foundational open-source xz compression project, embedding a multi-stage obfuscated backdoor into liblzma tarballs that hijacked OpenSSH sshd authentication to enable unauthorized pre-auth remote code execution.
2 techniques
View case details →