Silent Installation of Malicious VSIX Extension

Ibrahim Saud@tektrix

•updated Jun 19, 2026•0•0•5

Detects the automated installation of the malicious 'google-update-support' VSIX extension, which has been associated with the UNK_DeadDrop phishing campaign targeting developers.