https://port22.co.uk/news/93073bbe356f02aad06e7ec7ce99bb24/
GlassWorm Returns with 24 Malicious Extensions Impersonating Popular Developer Tools | Port 22
developer toolsglasswormreturnsmaliciousextensions
https://lab.isotope13.io/file/fa84708cbfba9751734e4bdfe1e11304a7fdda4642e219bd8c01e5e84fd47cef
2026-09-26_0e758c3d62ad59cbd809d37491ff61cf_cobalt-strike_glassworm_icedid_njrat_ryuk_satacom -...
Trojanized Opera installer malware
cobalt strikeglasswormnjratryuk
https://hackersradar.com/open-vsx-sleeper-extensions-activate-new-glassworm-malware/
GlassWorm Campaign Uses 73 Malicious Open VSX Extensions – Hackers News
Jun 22, 2026 - The GlassWorm supply chain attack targeting the Open VSX marketplace has significantly expanded, with researchers uncovering an additional 73 "sleeper"...
open vsxglasswormcampaignusesmalicious
https://www.cybersecurityup.it/knowledge-hub/news/estensioni-vs-code-clonate-73-trappole-su-open-vsx-che-rubano-credenziali-con-glassworm-v2
Estensioni VS Code Clonate: 73 trappole su Open VSX che rubano credenziali con GlassWorm v2
Ricercatori di cybersecurity hanno individuato una campagna di malware che prende di mira gli sviluppatori attraverso estensioni false di Visual...
vs codeopen vsxestensioniclonatetrappole
https://community.advania.co.uk/discussion/742/coordinated-operation-dismantles-multi-channel-glassworm-c2-infrastructure
Coordinated operation dismantles multi‑channel Glassworm C2 infrastructure - The Advania Community
Observed in the wild * On 26 May, reported the coordinated takedown of the “Glassworm” botnet, which had targeted software developers globally since at least...
coordinatedoperationdismantlesglassworminfrastructure