A newly analyzed campaign dubbed “Evelyn Stealer” is turning the Visual Studio Code (VSC) extension ecosystem into an attack delivery platform, enabling threat actors to compromise software developers and pivot deeper into enterprise environments. The campaign abuses seemingly legitimate extensions including a “Bitcoin Black” theme and a “Codo AI” coding assistant as the initial lure. […]

The post Visual Studio Code Abused in Sophisticated Multistage Malware Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.