- Lazarus group’s Contagious Interview campaign abuses Visual Studio Code via malicious Git repositories
- Attackers deliver JavaScript payloads on macOS, enabling persistent data harvesting and C2 communication
- Jamf urges enabling advanced threat controls and caution with untrusted repositories
As part of the infamous Contagious Interview campaign, North Korean threat actors were seen abusing legitimate Microsoft Visual Studio Code in their attacks.
