GlassWorm
CrowdStrike Glassworm Takedown Exposes Developer Supply Chain Risk
CrowdStrike announced it has taken down the Glassworm botnet, a global threat campaign attacking software developers through open source tools. The company simultaneously struck Glassworm’s four command-and-control (C2) channels alongside collaborators Google ...
GlassWorm Malware Attacks Return via 73 OpenVSX Sleeper Extensions
What happened A new wave of the GlassWorm supply chain attack campaign has been identified by Socket researchers, deploying 73 extensions to the OpenVSX registry that are designed to appear benign on ...
GlassWorm attack installs fake browser extension for surveillance
It hides inside developer tools, then monitors activity and steals data, turning a single infection into a wider risk across the supply chain ...
An Evolving GlassWorm Malware is Making the Rounds of Code Repositories
The bad actor can now deploy a RAT, is targeting MCP servers, and is finding new ways to move through Open VSX ...
