Mustang Panda, an advanced persistent threat (APT) group with ties to China, has been seen using Visual Studio Code as a weapon in espionage campaigns against Southeast Asian governments.
Palo Alto Networks Unit 42 researcher Tom Fakterman described this threat actor’s usage of the inbuilt reverse shell capability in Visual Studio Code as a relatively new approach that was initially shown by Truvis Thornton in September 2023.
The effort is believed to be an extension of an attack that was previously reported and that was launched in late September 2023 against an unidentified government body in Southeast Asia read more about Chinese Hackers Exploit Visual Studio Code in Southeast Asian Cyberattacks.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.