Fake Job Interviews Are Installing Backdoors on Developer Machines

threatroad.substack.com

cross-posted to:
security@lemmy.ml

Fake Job Interviews Are Installing Backdoors on Developer Machines

threatroad.substack.com

cm0002@infosec.pub to

cybersecurity@infosec.pub · 2 months ago

cross-posted to:
security@lemmy.ml

Microsoft found attackers weaponizing Next.js “technical assessments” that trigger C2 the moment you open the project in VS Code. Three execution paths, same backdoor.

You must log in or # to comment.

Chat

cybersecurity@infosec.pub

Create a post

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !cybersecurity@infosec.pub

An umbrella community for all things cybersecurity / infosec. News, research, questions, are all welcome!

Community Rules

Be kind
Limit promotional activities
Non-cybersecurity posts should be redirected to other communities within infosec.pub.

Enjoy!

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

1 user / day
10 users / week
70 users / month
100 users / 6 months
0 local subscribers
6.1K subscribers
99 Posts
117 Comments
Modlog