Malware Activity
How Modern Cyber Attacks Are Targeting Both Executives and Developers
Recent cybersecurity investigations reveal a clear shift in how attackers are breaching organizations by going after people with the highest access and trust. In the VENOM campaign, threat actors target senior executives with convincing Microsoft SharePoint–themed emails that look like real internal messages and use QR codes to bypass email security. These attacks steal passwords, multi-factor authentication codes, and session tokens, allowing attackers to maintain access even after credentials are changed. At the same time, the GlassWorm campaign focuses on software developers by spreading malware through a fake version of a widely trusted coding productivity extension. Once installed, the malicious tool quietly spreads across multiple development environments, stealing data and opening doors for deeper compromise. Together, these campaigns show how attackers are abusing trusted workflows and
