North Korea-linked threat actors abuse VS Code auto-run to spread StoatWaffle malware

North Korea-linked threat actors are using malicious Microsoft Visual Studio Code projects to spread StoatWaffle malware via auto-run tasks in "tasks.json" files, which execute upon folder opening. This tactic leverages a multi-stage infection chain for cross-platform malware execution and data theft, highlighting the need for content creators and users to remain vigilant against such sophisticated attacks.

Read the full article at Security Affairs

---

Want to create content about this topic? Use Nemati AI tools to generate articles, social posts, and more.