TI Mindmap HUB
Threat Intelligence Report

The boardflow campaign: 15 fake Kanban VS Code extensions that download and run a remote payload

๐Ÿ“… August 22, 2026 ๐Ÿ“ฐ yeethsecurity.com ๐Ÿ” 0 CVE(s) referenced

Over a ten-week campaign, a threat actor published 15 fake Kanban-themed VS Code extensions that, upon activation, silently downloaded and executed remote payloads via obfuscated scripts, putting users at risk of immediate compromise with each IDE launch.

unclassified

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

๐Ÿ” Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

๐Ÿ“Š Visual Mindmap
๐ŸŽฏ IOC Extraction
โš”๏ธ MITRE ATT&CK TTPs
๐Ÿ“ฆ STIX 2.1 Bundle