Post

- In several cases, the threat actors set up entire front companies to lure in software developers via job listings promising high salaries. - The attackers would hide their malware inside 'skills assessments' send out to applicants as part of an elaborate fake technical interview process. 2/3

- The threat actors successfully pulled off a supply-chain attack by compromising the developer of a VS Code extension and injecting it with malware. - Mass layoffs across tech likely contributed to the success of the hacker's elaborate scheme. Full article: expel.com/blog/inside-... 3/3

This was fascinating, thanks for the well written analysis, Marcus