Threat Actors Exploit VS Code Extensions for Ransomware via GitHub C2

Security researchers have uncovered a sophisticated attack campaign attributed to Kimsuky, the North Korean-backed threat group known for conducting espionage operations against government entities and think tanks. Recent analysis reveals that threat actors are leveraging Visual Studio Code extensions and GitHub as command-and-control infrastructure to deliver multi-stage malware payloads capable of deploying ransomware and conducting […]

The post Threat Actors Exploit VS Code Extensions for Ransomware via GitHub C2 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.