Threat Actors Abuse Visual Studio Marketplace to Target Developers

Threat actors targeting the Visual Studio Code extensions use a new attack vector. They upload rogue extensions impersonating their legitimate counterparts with the goal of triggering supply chain attacks on the machines of developers. Curated via a marketplace made available by Microsoft, VSCode extensions allow developers to add debuggers, programming languages, and other tools to […]

The post Threat Actors Abuse Visual Studio Marketplace to Target Developers appeared first on Heimdal Security Blog.