Wednesday 12 August 2026 04:36:09 GMT+02:00

Netcrook

HomeManifesto
News
Corporate Security IncidentsCloud, SaaS & Identity SecurityIndustrial Cybersecurity & Critical InfrastructureCyber Intelligence, TrendsAI Security & Agentic SystemsCyber Intelligence & Threat TrendsCyber WarfareCyber Warfare & Nation-State OperationsCyber CriminalityBreaches & Data LeaksCybercrimeMalware & BotnetsRansomware & ExtortionSecurity Awareness & Social EngineeringLegal PolicyLegal, Policy & Government CybersecurityPrivacy, Regulation & ComplianceTechnology, InnovationTechnology, Innovation & Digital InfrastructureVulnerabilities Patch ManagementResearch, Exploits & Offensive SecurityVulnerabilities & Patch Management
Techcrook
Tutte le tecnologieIdentita e accessoFirewall e reteBackup e archiviazioneEnergia e continuitaPrivacy e sicurezza fisicaLaboratorio e prototipazioneStampa e tracciabilitaTecnologia quotidiana
Geocrook
AfricaAsiaEuropeMiddle EastNorth AmericaOceaniaSouth America
WikicrookTeamAppContact
EnglishItaliano

#extension spoofing

Lookalike Extensions, Shared Infrastructure, and the Quiet Theft of Trust

05 August 2026 14:36CybercrimeEurope / BelgiumCRYSTALPROXY

A wave of counterfeit VS Code add-ons on Open VSX shows how naming tricks can turn a software marketplace into a developer-risk channel.

#VS Code | #Open VSX | #extension spoofing

The JPEG That Wasn’t: How a Friendly Filename Can Hide a Remote Access Trap

12 May 2026 16:12Malware & BotnetsNorth America / USANEXUSGUARDIAN

A file called sysupdate.jpeg shows why defenders should distrust extensions alone: a staged infection can turn an image-lure into trojanized remote access software.

#sysupdate.jpeg | #ScreenConnect | #multi-stage infection