Technology News and Headlines

Glassworm Returns Once Again with a Third Round of VS Code Attacks

A new wave of the Glassworm campaign has resurfaced, introducing 24 malicious extensions to both the Microsoft Visual Studio Marketplace and the OpenVSX Registry. The extensions conceal the Lumma infostealer using invisible Unicode characters, targeting GitHub, npm, OpenVSX accounts and extracting tokens from 49 browser‑extension wallets. In addition to credential theft, the payload drops an HVNC client and a SOCKS proxy for remote access and traffic routing. Researchers have alerted Microsoft, which says it is tightening scanning and detection mechanisms.