AA

"GlassWorm": Invisible Computer Virus Attacks Software Developers

Neue Malware "GlassWorm" nutzt Unicode-Tarnung.
Neue Malware "GlassWorm" nutzt Unicode-Tarnung. ©Canva (Sujet)
A novel computer virus called "GlassWorm" is specifically targeting software developers.

According to IT experts, the extremely sophisticated malware spreads through Microsoft's source code editor, Visual Studio Code (VS Code), and is introduced via third-party extensions. The malware gains remote access to infected computers, attempts to siphon funds from crypto accounts, and collects login data, among other things, to infect further extensions.

New Computer Virus "GlassWorm" Targets Software Developers

The malicious code was discovered on October 17 by the Israeli-American IT security firm KOI in the "CodeJoy" extension of a Chinese developer. On their blog, KOI describes it as "one of the most sophisticated attacks we have ever analyzed."

What is new is how the virus hides. The malware is effectively invisible due to non-displayable Unicode characters, which is why KOI named the malware "GlassWorm": "It uses camouflage techniques that we have never seen in the wild before."

Third-Party Code Generally a Security Risk

KOI points out that untrusted third-party code generally poses a security risk. Recently, KOI uncovered 18 extensions for the Chrome and Edge internet browsers that suddenly became malicious through updates, infecting several million users.

(APA/Red)

This article has been automatically translated, read the original article here.

  • VOL.AT
  • Vienna English News
  • "GlassWorm": Invisible Computer Virus Attacks Software Developers