@opensourcemalware: DPRK’s fake font / VS code trick for disseminating malware

OpenSourceMalware.com
OpenSourceMalware.com
Open In TikTok:
Region: US
Wednesday 16 September 2026 14:40:30 GMT
406306
29475
529
2339

Music

Download

Comments

drchang4
Sebastian :
Who's is jason?
2026-09-18 00:21:26
2810
yttikstocks
YT TICKS STOCK :
Thats why its important to inspect the code. Either do it yourself or send it to virustotal, socket dev or Snyk
2026-11-09 10:07:47
0
tellatelling
Tella :
It's not Jason but JSON =Java Script Object Notation
2026-09-21 03:49:21
7
edwinsifunda
Edwin Si'Funda :
Jason Statham?
2026-11-09 20:51:10
0
randomuser1737482
randomuser1737482 :
This is why I use vim
2026-09-17 15:38:14
413
alexbraatz
alex :
i totally would have fell for that whitespace trick 😭😭😭
2026-09-19 14:52:22
452
mutinyx8
MutinyX :
I don’t get why Microsoft and Apple haven’t made it easy to setup seamless sandboxes yet.
2026-09-16 21:28:29
445
kusaishhem3
Qusay 🍉 :
ppl should be more careful with git repos
2026-09-18 19:55:04
241
s_tressn
StressOnKnees :
emacs and vim users grinning after hearing this
2026-09-17 16:03:36
110
almostengr
Kenny Robinson :
that's useful info
2026-09-16 17:52:43
426
hacksmile0
Hack Smile :
why does github allow it on their platform?
2026-09-21 09:15:57
32
skidedddle
skidedddle :
F yeah opensourcemalware on the timeline i love it!
2026-09-16 22:49:48
300
7hevillager
Vilagussy :
i get it that it’s a virus but why is it from north korea?
2026-09-17 16:55:08
0
antonioemartinezr
Antonio Martínez :
How do you identify that the malware is coming from north korea?
2026-09-18 15:04:44
46
comrade.pasta
Plimbo male :
Hey, just wanted to say thanks for making these videos. I work in InfoSec and they’re really helpful for staying informed.
2026-09-20 02:01:31
22
matty6175
Matty :
Jokes on DPRK I don’t know how to use GitHub. The only thing I know about it is the name GitHub.
2026-09-19 01:43:58
60
staaaaaaaaaaan
stan :
Thank you for sharing this public. I showed the same to our internal dev team as awereness training about 2 weeks ago.
2026-09-20 11:08:49
57
themoonsloth
Elvis Jagger :
task.allowAutomaticTasks patched in Jan 2026 to be off by default, and it won't run on untrusted workspaces, so you only get infected if you run the task yourself or change it to run by default
2026-09-19 22:13:15
25
elrouxxx
observer ward :
Learn neovim or emacs boys
2026-09-18 13:39:47
15
fennixis
KernelKhaos :
This is why MS Word is the best IDE
2026-09-30 09:20:47
10
olubodun_
Olu :
Signed commits solve some of these issues, the malware affects your repos by rewriting commit history and force pushing.. It's also not just north Korea, at allll
2026-09-19 12:45:37
6
henrygsv0
henry-gsv :
oh shit I use vs code for all my projects and love experimenting w random GitHub projects. I guess I should use a more secure editor?
2026-09-16 18:03:19
50
techfun65
techfun :
So what made you accuse DPRK? You could have said anyone can use it but you intentionally mentioned DPRK. But you gave no evidence or reason to believe that DPRK is using it and others are not.
2026-09-18 19:59:08
47
To see more videos from user @opensourcemalware, please go to the Tikwm homepage.

Other Videos


About