Threat actor
GlassWorm
Tracked by CyberSIXT since 20 Jun · RSS
3Articles, all time
2Articles, last 30 days
0CVEs exploited, attributed · all time
0Research reports, all time
Activity
Quiet for 12 dayslast report 21 Oct3 articles2 outlets
Three articles so far, 20 Jun to 21 Oct.
- Wed 21 Oct. Dark Reading. OVHcloud GitHub Attack Replaced CLI Releases with Malware for 93 Minutes.
- Mon 5 Oct. SecurityOnline. Malicious VS Code Themes Hide GlassWorm Credential Stealers.
- Sat 20 Jun. SecurityOnline. GlassWASM malware lurks in VS Code extensions using Solana.
- Article naming GlassWorm
- Articles a day, all coverage
- Quiet time, folded
Drawn: all 3 articles.
Show as tableHide table
| Date | Type | Source | Title |
|---|---|---|---|
| 21 Oct | Article | Dark Reading | OVHcloud GitHub Attack Replaced CLI Releases with Malware for 93 Minutes |
| 5 Oct | Article | SecurityOnline | Malicious VS Code Themes Hide GlassWorm Credential Stealers |
| 20 Jun | Article | SecurityOnline | GlassWASM malware lurks in VS Code extensions using Solana |
CVEs exploited
No CVE is attributed to GlassWorm in CyberSIXT coverage.
MITRE ATT&CK techniques
No MITRE ATT&CK® techniques are recorded for GlassWorm.
Articles3
Drawn: all 3 articles.