Malicious VS Code Extensions Alert: Protect Your Data from Sneaky Infostealers!
Cybersecurity researchers have unearthed two sneaky Visual Studio Code extensions, Bitcoin Black and Codo AI. Disguised as a crypto theme and coding assistant, these extensions secretly pilfer data like WiFi passwords. Who knew a coding assistant could moonlight as a data thief?
Hot Take:
Who knew that coding could be this dangerously stylish and “helpful”? Meet Bitcoin Black and Codo AI, the Bonnie and Clyde of the Visual Studio Code marketplace, stealing your data with the elegance of a color scheme and the charm of an AI assistant!
Key Points:
- Two malicious VS Code extensions, Bitcoin Black and Codo AI, were discovered stealing data.
- Bitcoin Black posed as a cryptocurrency-themed color scheme, while Codo AI functioned as a coding assistant.
- Both extensions executed hidden scripts for data theft using a DLL-based infostealer.
- The malware used DLL hijacking to run under trusted binaries like Lightshot.
- Codo AI remains available on the VS Code marketplace, posing ongoing risks.
Already a member? Log in here