US EditionVSCode Marketplace Removes Two Extensions Deploying Early-Stage Ransomware
This story is only covered by news sources that have yet to be evaluated by the independent media monitoring agencies we use to assess the quality and reliability of news outlets on our platform. Learn more here.2 Articles
2 Articles
Two extensions containing ransomware appeared in the Visual Studio Code store. After installation, they will automatically call PowerShell to download ransomware to encrypt the developer's data. However, these two extensions are still in the early stages of development and will only encrypt test folders, so no actual damage has been caused.
VSCode Marketplace Removes Two Extensions Deploying Early-Stage Ransomware
Cybersecurity researchers have uncovered two malicious extensions in the Visual Studio Code (VSCode) Marketplace that are designed to deploy ransomware that's under development to its users. The extensions, named "ahban.shiba" and "ahban.cychelloworld," have since been taken down by the marketplace maintainers. Both the extensions, per ReversingLabs, incorporate code that's designed to invoke a
Coverage Details
Bias Distribution
- There is no tracked Bias information for the sources covering this story.
Factuality
To view factuality data please Upgrade to Premium
