Fake Moltbot VS Code Extension Drops ScreenConnect Backdoor
Lead On January 27, 2026 a malicious Visual Studio Code extension impersonating Moltbot (branded as “ClawdBot Agent – AI Coding Assistant”) appeared on the official VS Code Marketplace and was later removed by Microsoft. The extension executed automatically when the IDE launched and fetched a configuration file that triggered installation of a ConnectWise ScreenConnect client, … Read more