RANSOMVIBING APPEARS IN VS CODE EXTENSIONS

Summary from the TLDR InfoSec newsletter

A ransomware-infected VS Code extension, "susvsex," was found on the Visual Studio Marketplace. It utilizes GitHub for command and control, encrypts files, and uploads them for extortion, but its malicious intent was clearly evident. Due to poor coding and a hardcoded decryption key, its threat is currently low. The incident highlights gaps in extension security.