Malicious VSCode Extension Distributes Anivia Loader and OctoRAT
First seen 4 Dec 2025, 06:42 UTC
•
•89% similarity
•38
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
A malicious Visual Studio Code (VSCode) extension has been identified as a vector for deploying the Anivia Loader and OctoRAT malware. This threat primarily affects users of the VSCode platform, enabling attackers to gain unauthorized access and control over victims' systems.
ThreatCluster AI