North Korean Hackers Are Turning Developer Tools Into Malware Delivery Channels
Proofpoint says UNK_DeadDrop sent 250+ phishing emails to nearly 100 firms, using GitHub and VS Code lures to steal credentials and wallet data.
More info