NORTH KOREA-LINKED HACKERS TARGET DEVELOPERS VIA MALICIOUS VS CODE PROJECTS

Summary from the TLDR InfoSec newsletter

North Korean operators are posing as recruiters and sending developers fake coding tests that require cloning malicious Git repositories into VS Code. Once the project is opened and trusted, malicious tasks.json configurations fetch obfuscated JavaScript payloads from Vercel to install backdoors such as BeaverTail and InvisibleFerret, enabling remote code execution, keylogging, data theft, and crypto mining.