#devsecops

I had a fake job interview. It was a malware delivery chain.

A fake recruiter tried to turn VSCode workspace trust into silent code execution. Here is the attack chain, the infrastructure, and the IOCs.