Ransomware Deployment via VS Code Extensions and GitHub C2 Exploited by Threat Actors

Threat actors are exploiting vulnerabilities in Visual Studio Code (VS Code) extensions to deploy ransomware, using GitHub as a command and control (C2) server. This attack method targets developers and organizations utilizing these extensions, potentially leading to significant data breaches and financial losses. The exploitation highlights the risks associated with third-party extensions in development environments.