corpus.blog
43,228 blogs · 5,519,570 posts Claim your blog
Record · corpus.blog/posts/01a07df3-86be-7259-8c79-b437661e41d9

Living off the Land with VS Code: Inside a Sophisticated Phishing Campaign

Joe Security · published 19 May 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at joesecurity.org Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
26
Words captured
3,285

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiqb2ERqPeWVus9Boj3rZ_ojLfEjWLidUlOJGGFh7zjBa9CA1jf9IzWnpkAA4c5J1SWOODVmyxhuOdDAI6cgJ6cTofJ3A6l4BLjxQgwInJxOM7bWIkHZWzEySh-XecOobY3uIy5GE1nUyHiRI1jbTHKLUByfg3veIzJIrF0TNnqxoE-tHdlmVKaUAGxunM/s1672/7599f715-7b68-433f-a0c6-b0b05070cd58.png
blogger.googleusercontent.com
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjpbIDjoQ9Uu3TS0ZKPdDLZsZ6Vr0Xq_pENXxG0_y8hANKrAL1nDKwmRnxyd8MkmWiHCeNte4jUT17cesh_DIQpgkLhV2SmQKmF94dOsVE9RO6swKuIlwHEqk150FCLn0tFXvq9N03Ogy9v1jiPBS3vmGLnwiZ906Bt_pcMCgFz86K0n3g6MT1ls9QupPo/s1376/joereverser.jpg
blogger.googleusercontent.com
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhskYT3JhdfX_kUIRvLMZkbkdndILjwWYzUPzKFvZBt2dFH51kZXQwAUx52CSHMh0lcC3VMkLxHNa3b9okJBYItKutgpcRl1QBhWvRETxzT7nbbgiT0rIi-8TmsgmTQWKgNm8mtx7Zou_-uMlMKxHPetMWfFmvI1mWhfxuSuzDNgwEcWzGa9Ihsv5vmksTM/s1209/2026-05-06%2011_05_04-.png
blogger.googleusercontent.com
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgcgBDMXwaWwbM_reu9g6_s1ydxALvutXnqKlss-Py6Fv-QZIjrKtLF0FzAurXn5WsAH1VZJMpa9u6BkVNKh9ig-tfLhJlMGpwGxuQHUwIo2d1dImMA1PAua7aT3hTVP5O-wLGr2lvzsjuD1sVzIBZFU3MX3R8Y0-6wEf5k7w3drsDaubbzgAvbD-cUjl0/s2125/00-email.png
blogger.googleusercontent.com
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj8v9glop2CXCqGvKhH54mNM_V0T7ulxp9fXkVLuJMkI4blFSDMKsnG7rXkBB8Og4Fp7DmLXMxe_KUlLwc_RZRwGV0L0JQygvtSaRduJQHd27aHzz41l80tuYnBCQHxQ01OFugn6CmbrAiye8vh9sjPdsSN1RbpKde0wKwZETQEHiiJrrmhwIqH9NJCyPA/s1769/01-05-vba-macro-code.png
blogger.googleusercontent.com
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjyv3WdKGN0FfZzJm3f1aIR9OzApXRRXh1h60smfYroLndnK92L1kPUngycXdHbVuqUbu_NAYQ1wbSsC9AflijIdC8jxU2euA8rKyKJoyjOFr3rM3bTiBlWB7EoYW1CxaO6xQQRmSOusJin7EGj8IbRu98C2dHcBD0kU5kRJKLYeiDR8lfatLwilfAwwV8/s1215/code2.png
blogger.googleusercontent.com
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh6IrU6zfe4ajCVek05MDW0lTVz91U_USjNRfZ3n5_dCgzn637p8f6UIe1c2ZDnHY8kL7mEB3wxyIVbGcs6WvIk9ef84lwI_aYsK_ggDlc1mQuKrbDJ_TgNlzdnrLONOm5tiTrTzkGE1HlyaS1_xf70n_hqMj8Hxko39FCLwejfXWi5VA1tS4HpJT9yprU/s1221/code1.png
blogger.googleusercontent.com
https://www.joesandbox.com/analysis/1903908/0/html
joesandbox.com
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiWSAb4hOQjMk8wB4OHCijBaqI3DJ7ZHRJLZYx5tH7K3jvxwVZB7c6PP_rFEedTBTcwyEHefRiaQsiXYMrJgeMx16V3cTG7I9CRwq4bxbLe4b34HueXUqqLRh6PeVQ6O8j_-KVQhqlQD95WZztlAyDByXzPhvYWOUKZKNgnywBMqqDR_UfLNnD8GiUeH2A/s1304/regs.png
blogger.googleusercontent.com
https://code.visualstudio.com/docs/remote/tunnels
code.visualstudio.com
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiPh7C9MLn-HpssWhWSKjHE1HWVyp4cFxUXIj9kG4ri-QuMvP0Cn_RS0_8aRMC2qxJHS77FZJ2IplvXhoTf9vsgv3oXV0H1IoByCziWim9qytFKSTOMDrnzPYiPbE9LJgkdGeUlaWKODfp4itNWvsBnXGllqSixLMnpzP9vli_j6Fj4Pf9Kw7e5gSyPq6k/s1491/20-vscode-tunnel-abuse.png
blogger.googleusercontent.com
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXzOFVpfzWhIoWNUeLDDXRgITIAEa8UKyaqYpO5VbBwBBEOWta8_V6igKE1Nyujcmng_MyDz9hyUBz0j7NLa62MLuZ_0KcSspsO3x58AgV7wc_67pQ18R6YgicLo3jrbmF9BDzEajWtSM474wFN14ogQZsbFUlKaYFc4WZKbcS6hdkZsOnUse0MdxVtAU/s1616/06-microsoft-login-device-code.png
blogger.googleusercontent.com
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEic20IKFlTei4lMkhblhnHuvxjjIJ9BLciZMbtLym_JYc1C123-nnX_1-mVrLERlvfYTddHyG0VLaxWp_k6yWJ9msMg06LQE4kJK8R1mGsriw1mt3CIUf44_4vWn_OhH0YGGoeo4DZlpPp7fT8MJdm7cigoJv7YsaZci-yH4trhBN7N5ZCgBxllKR9BEpc/s1613/07-microsoft-login-device-code.png
blogger.googleusercontent.com
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjpz4XntRDHTGxXupjgkkrP-t_IXHPo41_v9eFkbV3tcHc641af1zToX2-vCJZsjCaIK94oakPVgKgpRwR-GucNwKDttbsHSjCnCiSUOrIMeC2J5fmLsRN3_XaeNrv-ggoFFZCSnBioUYRwWuW6HYJzYdDaGpbZSq9g7U8yt7qO7ahN_sCEz0MU_Wv640k/s1618/08-microsoft-login-device-code.png
blogger.googleusercontent.com
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEicSNcSzxI9a_89Jcf9sgT83cgDNityOTqzxu4U6qd8cXO7RAXKXfF84nlXlIWnsMBVsKHeItDaDEsOCJ6ou7vqgZByQK9ZtjUfCxNdXSRLRKQ9M_f1YSrgws0I3ZEl9-yOZWRlbdOdv9WVRskECoi6L6g7fuLjhElLwHF5mNL5ewWO2K2Vgbf-ea5gIag/s860/09-microsoft-login-device-code.png
blogger.googleusercontent.com
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgf09CxDKZ50NoBBAlQe_wTBYDRUmt3Qq9daxVdEhp1eRptJ8yBzXD2QkVsqAVQ8-oGq9ofes7h9ikWjk3W2su2HAOLcSbJSBAVtZrH_KrJaQdYzySSZ133QW9YHsy-Jbd4O7RwmHjCfoMFiq73DNktX8XbijFpqEn6kiB10tYtjUuXHO4tbP5TzG6_CFw/s876/10-microsoft-login-device-code.png
blogger.googleusercontent.com
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjN0OFCLCRlxYn4EzqAGiZZA82ifGPlR3pDAnv0brzFTFhXQRo-3didTJfAwy7F_uszbzBvMouSsDi6XnCC7eYCYKQbGyBAfaz_-82ma44MgpO1nulMDKfzB1nXGf9kSU1GMEEYeoJRCfhw08Cl_7kTPZ3d-6Yt1cBRpwnaRk2WLg9Ljuom4s6jjRhS8JA/s1619/11-microsoft-login-device-code.png
blogger.googleusercontent.com
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgKnA_ggkhcCA9qL7XMkdA9mglrtES3HWDGTvP5wzKrGU_8qoRXitA_vuXM3oYdIy8kl0uXk-Pzho-IsJkgzz7QHcLZ41vfTlMZGol6ocL0cWVABufmQzZ9o0zbcAy0MfDZTEFTGTj-kIw7wl2JYhH1mofC2JY8f5IllbDVal3KRkosrEC-8eNyxzZnrcI/s1272/12-acrobat-link.png
blogger.googleusercontent.com
https://www.joesandbox.com/analysis/1903906/0/html
joesandbox.com
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiLSg9QY9RN4gMbHUfEq1LONtC4nQTN1rfovK39Y03NnEGFei2EGherOO_wQIImYrfEBx_Q3YCjaE9rU_Wb0yRm2F9-7C-itwa2FKMVURwhVr5dIbMof2opddJEzchpi_Fkjgidnrl_yLbl8JXvI1AOTU6591U2vyynlNlkZo2bdXAFiKFHbEAb6nPyVp4/s640/code3.png
blogger.googleusercontent.com
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi565L0bd_dnKKE2txryeW9TtHblizqmJl0e9y2d4XRCssIXYZ_jay4RVn8oMh2xL1yZDJxfsfgZbcPo-lURn4vPMCzTlMcTj9usktkSPk7Zo7N40gJ6ETNmplW5EJ_sWU4f_mQCL1QSxksaFhgJoV5GOaUKgKVmFaoWrRLfTbX7R8i4TPc2cvNSYbZctA/s1915/13-cannot-download-error.png
blogger.googleusercontent.com
Demystifying ClickOnce Read at the source ↗
textslashplain.com
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgt7vl5Fs1ujdqzjn-5Amv7NEXWDJ0j071zPuQJ_Dg5BosHUiPslYAe4V2dtYbkXnpirbad9nW41nILdKqVvqaoXX1bXjuZiO1IKAU6NwQABp8T5lkD2-mkKkJGnaurUlQCYXrxrckkKyq1PNm__p3Grz9b9AaQN0kz-N0ZnN8GUsOGtvboKqOcvuHP_y8/s1619/14-bunny.net.png
blogger.googleusercontent.com
https://www.joesandbox.com/register
joesandbox.com
https://www.joesandbox.com/joereverser/analysis/download/ff6db592-b57e-4d21-9d46-e69c2719d8a5?type=html
joesandbox.com
https://www.joesandbox.com/analysis/1908010/0/html
joesandbox.com
Elsewhere on joesecurity.org (3)