Socket on Mythryl: “🚨 We’re seeing a widespread GitHub campaign using fake VS Code…”

🚨 We’re seeing a widespread GitHub campaign using fake VS Code alerts + Google redirects to route developers to attacker infrastructure. The flow adapts based on cookies and fingerprints users before serving a second-stage attack. Not your average phishing link: socket.dev/blog/widespr...

socket.devWidespread GitHub Campaign Uses Fake VS Code Security Alerts...Widespread GitHub phishing campaign uses fake Visual Studio Code security alerts in Discussions to trick developers into visiting malicious website.

25/3/26, 8:39 pm7 reposts14 likes

Post