Weaponized VS Code Extension “ClawdBot Agent” Spreads ScreenConnect RAT

Gbhackers •Mayura Kathir • January 29, 2026

GBHackers on Security is a top cybersecurity news platform, delivering up-to-date coverage on breaches, emerging threats, malware, vulnerabilities, and global cyber incidents.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Malicious ClawdBot Agent VS Code Extension Discovered Deploying ScreenConnect RAT A malicious VS Code extension named 'ClawdBot Agent' was discovered on January 27, 2026. This fake extension, posing as an AI-powered assistant, targets developers and deploys the ScreenConnect Remote Access Trojan (RAT). Users of legitimate coding tools are at risk of compromising their systems through this deceptive software. 2 sources 54

Extracted Entities

Weaponized VS Code Extension “ClawdBot Agent” Spreads ScreenConnect RAT

The full story

Extracted Entities

Attack Types (2)

Malware (1)

Tools (3)