North Korean hackers abuse VS Code auto-run tasks to push StoatWaffle malware
VPN Central [Unofficial]
March 24, 2026
North Korean threat actors have started abusing Visual Studio Code auto-run tasks to infect developers with a malware family called StoatWaffle, according to new research. The activity links back to the broader Contagious Interview campaign, where attackers pose as recruiters and send fake coding tests or project files to developers, founders, and senior engineers. Microsoft […]
The post North Korean hackers abuse VS Code auto-run tasks to push StoatWaffle malware appeared first on VPN Central.
Discussion in the ATmosphere