# Malware Sneaks Into Pidgin Plugin Repo, Spreads Keyloggers and DarkGate 🦠

**URL:** <https://onehack.st/t/malware-sneaks-into-pidgin-plugin-repo-spreads-keyloggers-and-darkgate/290318>\
**Category:** News & Articles\
**Tags:** hacking\
**Created:** [August 31, 2024, 12:06pm UTC](https://onehack.st/t/malware-sneaks-into-pidgin-plugin-repo-spreads-keyloggers-and-darkgate/290318 "2024-08-31T12:06:07Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![TheJoker](https://onehack.st/user_avatar/onehack.st/thejoker/32/22660_2.png) [@TheJoker](https://onehack.st/u/TheJoker)\
**Post date:** [August 31, 2024, 12:06pm UTC](https://onehack.st/t/malware-sneaks-into-pidgin-plugin-repo-spreads-keyloggers-and-darkgate/290318/1 "2024-08-31T12:06:07Z")

</div>

**Summary:**

* * *

1. **Malicious Plugin Discovered**  
The ScreenShareOTR plugin for Pidgin was found to be malicious, installing keyloggers and DarkGate malware on users’ systems. This plugin was marketed as a secure screen-sharing tool but was actually used to breach corporate networks.

2. **Immediate Actions Taken**  
Pidgin has removed the compromised plugin from its repository and advised users to uninstall it and perform a full system scan. The incident highlights the risks of using unvetted third-party plugins.

3. **Future Precautions**  
To prevent similar issues, Pidgin will now only accept third-party plugins with OSI Approved Open Source Licenses, ensuring that their code is open to scrutiny and reducing the risk of hidden malware.

**Read more at:** [BleepingComputer](https://bleepingcomputer.com)