[H4ckN3ws]North Korean Hackers Abuse VS Code Auto-Run Tasks to Deploy StoatWaffle Malware

[ThaHaka 0]

This is the hidden content, please

• Sign In
• or
• Sign Up

The North Korean threat actors behind the Contagious Interview campaign, also tracked as WaterPlum, have been attributed to a malware family tracked as StoatWaffle that's distributed via malicious

This is the hidden content, please

• Sign In
• or
• Sign Up

Visual Studio Code (VS Code) projects. The use of VS Code "tasks.json" to distribute malware is a relatively new tactic adopted by the threat actor since December 2025, with the attacks

This is the hidden content, please

• Sign In
• or
• Sign Up