GlassWorm, Self-Propagating Worm Using Invisible Code Hits OpenVSX and VSCode(koi.ai)

3 pointsby chha9 ay önce4 comments

GlassWorm, Self-Propagating Worm Using Invisible Code Hits OpenVSX and VSCode

https://www.koi.ai/incident/live-updates-glassworm-first-self-propagating-worm-using-invisible-code-hits-openvsx-and-vscode-marketplaces

5 comments

gr1nse9 ay önce

How is the invisible code done? Writing Unicode variant selectors VS1–VS256 and then letting them get interpreted as normal Unicode chars? I do not come to it how it is not visible and selectable but still gets executed like normal...

thenaturalist9 ay önce

It's using Liquid Glass at max transparency... /s

hmmmmmmmm_08 ay önce

chha9 ay önce

Similar to the Shai Hulud attack, but with more sofisticated C2 (blockchain, Google Calendar). It also uses Unicode characters to hide source code in IDEs, harvests ecosystem credentials to infect and publish new versions of packages you have access to, and more.

bmitch30209 ay önce

Previously submitted at https://news.ycombinator.com/item?id=45647853