Glassworm Botnet Targets Developer Workstations Supply Chain | MSSP Advisory

CrowdStrike disrupted the Glassworm botnet that specifically targeted software developers and development environments. The botnet compromised developer workstations to steal source code, credentials, and potentially inject malicious code into software supply chains. Details on attack vectors and affected platforms remain limited in the available reporting.

Your RMM agents and remote access tools run on developer workstations at client sites where this botnet operated, creating a direct path into your management infrastructure. Clients with development teams need immediate notification because compromised developer environments can poison their entire software pipeline and any applications they distribute to customers.

📬