ATTACKERS ABUSE VELOCIRAPTOR FORENSIC TOOL TO DEPLOY VISUAL STUDIO CODE FOR C2 TUNNELING

Summary from the TLDR InfoSec newsletter

Threat actors are using the Velociraptor forensic tool to deploy Visual Studio Code for command and control tunneling. The attackers are exploiting Velociraptor's endpoint monitoring to download and run Visual Studio Code, likely to establish persistent backdoor access. This follows the trend of cybercriminals exploiting trusted tools to evade detection and maintain covert channels.