Fake AI coding assistants for VS Code, disguised as ChatGPT extensions, infected over 1.5 million developers with spyware.
The FBI warns North Korean hackers are using QR code phishing to steal logins install malware and spy on US targets.