Malicious VS Code Extensions Exploit Microsoft Registry to Steal WiFi Passwords

First seen 9 Dec 2025, 14:54 UTC • Cyberpress

•42

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

A series of malicious Visual Studio Code extensions have been identified, exploiting vulnerabilities in the Microsoft Registry to steal WiFi passwords and capture screens. Users of Windows systems are particularly affected due to weak registry and process controls that allow these extensions to operate undetected.

How this analysis works

Attack Flow

Continue Reading

Lazarus Group Exploits Windows Zero-Day to Target Defense Sector Tropic Trooper Expands Tactics with Multi-Stage Attacks on Japanese and Taiwanese Targets Void Dokkaebi's Malware Campaign Exploits Developer Repositories via Fake Job Interviews Kimsuky Group Leverages AI for Malware Targeting South Korean Government Kimsuky Targets South Korea with Advanced Malware and Social Engineering Tactics Microsoft's Record Patch Tuesday in June 2026 Addresses 206 Vulnerabilities

Malicious VS Code Extensions Exploit Microsoft Registry to Steal WiFi Passwords

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading