Back Cybersecuritynews

Threat Actors Weaponizing Visual Studio Code to Deploy a Multistage Malware

Cybersecuritynews •Tushar Subhra Dutta • January 19, 2026

Threat actors are turning Visual Studio Code into an attack platform, using its rich extension ecosystem to slip multistage malware into developer workstations. The latest campaign, dubbed Evelyn Stealer, hides behind a malicious extension that delivers a stealthy information stealing tool in several carefully staged steps. Instead of targeting end users, the operators go after […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Visual Studio Code Exploited for Multistage Malware Deployment Threat actors are utilizing Visual Studio Code to deploy a sophisticated multistage malware campaign known as Evelyn Stealer. This malware is delivered through a malicious extension that targets developer workstations, aiming to steal sensitive information rather than directly attacking end users. 4 sources 31

Extracted Entities

Threat Actors Weaponizing Visual Studio Code to Deploy a Multistage Malware

The full story

Extracted Entities

Attack Types (1)

Malware (1)

Platforms (1)