VSCode - DPRK Threat Intelligence

#VSCode

Vulnerability

2025-11-29 • Latest Contagious Interview malware campaign abuses Microsoft VSCode Tasks

27

Tagged Reports
15

Unique Authors
192

Active Days

Tagged Reports

2026-06-08

Proofpoint

Don't Fear the Repo: UNK_DeadDrop Phishing Campaign Targets Developers to Steal Cryptocurrency

#Phishing #GitHub #VSCode #ContagiousInterview #T1566.002 #T1204.002 #T1059.007 #T1059.006 #T1555.003 #T1555.001 #T1056.001 #T1027 #T1105 #T1059.003 #UNK_DeadDrop

2026-05-25

Denv

I was likely targeted by DPRK in a sophisticated developer malware campaign

#ContagiousInterview #Phishing #VSCode #T1566.002 #T1204.002 #T1059 #T1105

2026-05-22

Red Asgard

A Fake Coding Interview Is an Execution Request: Developer Safety Checklist

#Lazarus #GitHub #NPM #VSCode

2026-05-15

Logpresso

1분기 DPRK Operation Kimsuky 분석

#Kimsuky #LNK #GitHub #VSCode #Phishing

2026-05-14

Kaspersky

Disclosing new PebbleDash-based tools by Kimsuky

#Kimsuky #APT43 #RubySleet #BlackBanshee #SparklingPisces #VelvetChollima #Springtail #PebbleDash #AppleSeed #HappyDoor #HttpTroy #VSCode #GitHub #Phishing #JSE #ADS #T1566.001 #T1059.001 #T1059.003 #T1105 #T1053.005 #T1547.001 #T1543.003 #T1219 #T1027 #T1005 #T1113 #T1056.001 #T1041 #T1071.001

2026-05-14

OSM

How malware abuses npm lifecycle scripts and VS Code tasks

#NPM #VSCode #Lazarus #ContagiousInterview #BeaverTail #InvisibleFerret #TasksJacker #Axios

2026-03-31

OSM

TasksJacker: Latest DPRK Attack Skips the Fake Interview and Goes Straight to Compromising GitHub Users

#TasksJacker #VSCode #T1059.007 #T1070.004 #T1036 #T1041 #T1543 #T1555 #T1059.004 #T1027 #T1102.001 #T1071.001 #T1552.004 #T1195.001

2026-03-17

NTTSecurity