Threat Actors Abuse Visual Studio Marketplace to Target Developers

Threat actors targeting the Visual Studio Code extensions use a new attack vector. They upload rogue extensions impersonating their legitimate counterparts with the goal of triggering supply chain attacks on the machines of developers. Curated via a marketplace made available by Microsoft, VSCode extensions allow developers to add debuggers, programming languages, and other tools to […]

The post Threat Actors Abuse Visual Studio Marketplace to Target Developers appeared first on Heimdal Security Blog.

abuse attack attacks attack vector code cybersecurity news developers extensions impersonating languages machines marketplace microsoft programming rogue studio supply supply chain supply chain attacks target targeting threat threat actors tools visual studio visual studio code vscode