Frequency
4
occurrences
First Seen
April 10, 2026
Last Seen
May 28, 2026
Related Threat Clusters
-
Glassworm Botnet Targeting Developers Disrupted by CrowdStrike and Google
The Glassworm botnet, which has targeted software developers since early 2025, was taken down in a coordinated operation by CrowdStrike, Google, and the Shadowserver Foundation on May 26, 2026. This botnet utilized…
30 articles · Updated May 27, 2026 -
GlassWorm Malware Exploits OpenVSX Extension to Infect Multiple IDEs
A malicious extension named code-wakatime-activity-tracker has been identified on the OpenVSX marketplace, designed to spread the GlassWorm malware across multiple integrated development environments (IDEs) including VS…
3 articles · Updated April 10, 2026
Recent Intelligence Reports
- CrowdStrike and Google have blocked 'Glassworm,' a botnet targeting open — Gigazine · May 28, 2026
- CrowdStrike and Google dismantle Glassworm botnet that targeted developers and drained ... — Bitget · May 27, 2026
- CrowdStrike and Google dismantle Glassworm botnet that targeted developers ... — Cryptobriefing · May 27, 2026
- Trojanized OpenVSX Extension Spreads GlassWorm Across VS Code, Cursor, and Windsurf — Cybersecuritynews · April 10, 2026