North Korean Hackers Weaponize VS Code in Contagious Interview Campaign

The Contagious Interview campaign has seen North Korean threat actors exploiting Microsoft Visual Studio Code (VS Code) to compromise software engineers in sectors like cryptocurrency and fintech. By embedding malicious logic into VS Code project configurations, attackers can execute harmful commands when victims open a repository and grant it trust. This evolution in tactics was highlighted in recent research from Jamf Threat Labs and OpenSourceMalware.