Fake VS Code extension on npm uses altered ScreenConnect utility as spyware

Introduction to Malware Binary Triage (IMBT) Course

Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor.

Enroll Now and Save 10%: Coupon Code MWNEWS10

Note: Affiliate link – your enrollment helps support this platform at no extra cost to you.

Fake VS Code extension on npm uses altered ScreenConnect utility as spyware

A counterfeit 'Truffle for VS Code' extension, published on the npmjs registry, abuses the ConnectWise ScreenConnect remote desktop utility, allowing threat actors to compromise Windows systems that install the package.

Article Link: Fake VS Code extension on npm uses altered ScreenConnect utility as spyware