Beware of Weaponized VS Code Extension Named ClawdBot Agent that Deploys ScreenConnect RAT

Cybersecuritynews •Tushar Subhra Dutta • January 29, 2026

A malicious VS Code extension has surfaced in the digital threat landscape, targeting developers who rely on coding tools daily. Discovered on January 27, 2026, the fake “ClawdBot Agent” extension presented itself as a legitimate AI-powered assistant, but it concealed a dangerous payload underneath. Unlike the actual Clawdbot service, which never released an official VS […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Malicious ClawdBot Agent VS Code Extension Discovered Deploying ScreenConnect RAT A malicious VS Code extension named 'ClawdBot Agent' was discovered on January 27, 2026. This fake extension, posing as an AI-powered assistant, targets developers and deploys the ScreenConnect Remote Access Trojan (RAT). Users of legitimate coding tools are at risk of compromising their systems through this deceptive software. 2 sources 54

Extracted Entities

Beware of Weaponized VS Code Extension Named ClawdBot Agent that Deploys ScreenConnect RAT

The full story

Extracted Entities

Attack Types (1)

Malware (1)

Tools (1)