Follow-up: fake recruiter trojan report marked resolved on the oss-security list

This item is a follow-up published on 17 October 2026 about a trojan disguised as a recruitment lure. According to the recorded reply, the domain linked to the case was resolved. The message was posted by Alan Coopersmith on the oss-security list, and the text states that the list is not a central channel for malware reports. The reply also explains that oss stands for Open Source Software and questions why the report appeared there. The content is an automatic translation of a message from the 2026 oss-sec archive, fourth quarter, message 217. To verify it, open that public archive using the list name and message number, and check the date and author. The text contains no further technical details such as indicators of compromise or the type of payload, so no technical conclusion beyond what is recorded should be drawn.