Bleepingcomputer
New GlassWorm Malware Targets macOS Developers with Trojanized Crypto Wallets
First seen 1 Jan 2026, 18:23 UTC
•
+1
•68% similarity
•40.8
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
A fourth wave of the GlassWorm campaign is targeting macOS developers by distributing malicious VSCode/OpenVSX extensions that contain trojanized versions of crypto wallet applications. These extensions are available in the OpenVSX registry and the Microsoft Visual Studio Marketplace, which are used to enhance the functionality of VS Code-compatible editors.
ThreatCluster AI