North Korean hackers target Microsoft Visual Studio Code users in a sophisticated new campaign that turns a developer's favorite tool into a gateway for malware. By abusing legitimate features like task configurations and VS Code tunnels, these state-sponsored actors are successfully bypassing traditional security defenses to gain full remote control of developer machines.