Tag: vs code

2 Attack Reports | 0 Vulnerabilities

Attack reports

VS Code Extension Impersonating Zoom Targets Google Chrome Cookies

A malicious Visual Studio Code extension masquerading as a Zoom application was discovered, designed to access and steal Google Chrome cookies. The extension, uploaded to the VS Code Marketplace on November 30 and updated on December 8, impersonates the Zoom Workspace tool to gain users' trust. It …
vs code
zoom
2025-01-21
cookies
Published: January 21, 2025
Downloadable IOCs: 3

Unraveling the Sophisticated Attack Leveraging VS Code for Unauthorized Access

A sophisticated attack has been uncovered that exploits Visual Studio Code's remote tunnel capabilities for unauthorized access. The attack begins with a .LNK file, disguised as a legitimate setup, which downloads a Python package and executes a malicious script. This script establishes persistence…
apt
python
cyber espionage
lnk file
github
2024-10-01
remote tunnel
unauthorized access
vs code
scheduled task
Published: October 1, 2024
Downloadable IOCs: 7
Click here to see more Attack Reports