GlassWorm malware attack strikes macOS

Security researchers have shared details of a malware attack targeting macOS. The Threat Research team at Socket identified a new GlassWorm attack which uses compromised Open VSX extensions. The extensions have been installed thousands of times, and come from the account from a legitimate developer whose account was compromised. Similar attacks have been taking place since October last year, but recent activity shows there is an uptick in this approach. Writing about its findings, Socket says that its “Threat Research team identified a developer-compromise supply chain attack distributed via the Open VSX Registry, specifically a compromise of the developer’s publishing… [Continue Reading]