FlagThis

ImgSrc: blogger.googleu

References :

• gbhackers.com: Visual Studio Tunnels Abused For Stealthy Remote Access
• BleepingComputer: Chinese hackers targeting large IT service providers in Southern Europe were seen abusing Visual Studio Code (VSCode) tunnels to maintain persistent access to compromised systems.
• The Hacker News: Hackers Weaponize Visual Studio Code Remote Tunnels for Cyber Espionage
• www.sentinelone.com: SentinelOne reports on Operation Digital Eye, detailing the sophisticated techniques used by Chinese APT actors.
• securityaffairs.com: Operation Digital Eye: China-linked relies on Visual Studio Code Remote Tunnels to spy on Europen entities
• Virus Bulletin: Aleksandar Milenkoski (SentinelLabs) & Luigi Martire (Tinexta Cyber) look into ‘Operation Digital Eye’, an activity cluster from a suspected China-nexus threat actor targeting large business-to-business IT service providers in Southern Europe.
• Security Risk Advisors: SentinelOne report on Operation Digital Eye Chinese APT
• www.bleepingcomputer.com: Chinese hackers use Visual Studio Code tunnels for remote access.

Classification:

• HashTags: #CyberEspionage #Azure
• Target: Business-to-business IT service providers
• Attacker: Chinese state-backed hackers
• Product: Visual Studio Code
• Feature: Visual Studio Code Tunnels
• Type: Espionage
• Severity: Major