Emergence of GlassWorm Malware Targeting macOS Systems
Article Content
Browse articles 
A new wave of GlassWorm malware has been identified, shifting its focus from Windows to macOS systems. This self-propagating worm is distributed through malicious VS Code extensions on the Open VSX marketplace, with over 50,000 downloads reported. Key features include encrypted payloads and the ability to trojanize hardware wallets.
Ask AI about this cluster
Answers cite the sources they use
Updated 213d ago How this analysis works
More articles in this cluster (3)
Following this threat?
Track Glassworm in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
GlassWorm Campaign Targets Developers with Malicious VS Code Extensions A cluster of malicious Visual Studio Code extensions linked to the GlassWorm threat actor was uncovered, affecting thousands of developers. These extensions, disguised as color themes, contain obfuscated JavaScript loaders that can retrieve secondary payloads. The Socket Threat Research team identified two confirmed… 
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…