Darktrace Identifies Campaign Targeting South Korea Leveraging VS Code for Remote Access

Darktrace identified a DPRK‑linked campaign targeting South Korean users with JSE‑based spear‑phishing lures. The activity highlights growing abuse of legitimate tools to evade detection and maintain persistent access.