Devops

Malicious VS Code Extensions Capture Screenshots and Steal Developer Data

First seen 11 Dec 2025, 02:49 UTC • Cybernews

•31.3

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Two malicious Microsoft Visual Studio Code (VS Code) extensions were identified, targeting developers to capture screenshots and steal sensitive information. The malware masqueraded as a premium dark theme inspired by bitcoin and AI coding assistant extensions, compromising developer devices.

How this analysis works

Continue Reading

Lazarus Group Exploits Windows Zero-Day to Target Defense Sector Tropic Trooper Expands Tactics with Multi-Stage Attacks on Japanese and Taiwanese Targets Void Dokkaebi's Malware Campaign Exploits Developer Repositories via Fake Job Interviews Kimsuky Group Leverages AI for Malware Targeting South Korean Government Kimsuky Targets South Korea with Advanced Malware and Social Engineering Tactics Microsoft's Record Patch Tuesday in June 2026 Addresses 206 Vulnerabilities

Malicious VS Code Extensions Capture Screenshots and Steal Developer Data

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading