Visual Studio Code

Reported Context (4)

tool.One tool leads by a wide margin: Claude Desktop (26.6%), a general-purpose AI desktop app. Visual Studio Code, a popular free code editor, is in second place (18.3%). In third place at 13.5% is Claude Code, a Acronis Data Shows AI Agent Use Across MSP and SMB Endpoints
Longlegs abuses a vulnerable, signed driver (K7RKScan) to disable security software before deploying ransomware, and has also been observed abusing Visual Studio Code's tunneling feature for covert remote access. Warlock Ransomware Group Hits Water and Telecom Operators, Continues Exploiting SharePoint
were exfiltrated after an employee installed a poisoned version of the Nx Console extension for Visual Studio Code — a marketplace extension with more than two million installs and verified-publisher status [18]. How Developer Dependency Culture Became a Major Software Supply-Chain Attack Surface
The extension, disguised as an R language support extension for Visual Studio Code, retrieves encrypted JavaScript from blockchain transactions, executes it using NodeJS runtime primitives, drops compiled add-ons to Malicious Windsurf IDE Extension Uses Solana to Deliver Credential-Stealing Malware

CVE (8)

Malware (4)

People (5)

Threat Actors (8)

MITRE ATT&CK (28)

Vendors (11)

Products (30)

Tools (4)

Industries (4)

Countries (23)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.