UNK_DeadDrop was a fake-recruitment campaign that targeted software developers through a verification page with a booby-trapped copy button and a take-home repository that installed a malicious VS Code extension. These articles reconstruct it from retained artifacts without running any sample, from the lures through collection, infrastructure, targeting and detection, and each says where the evidence stops. All 14 parts
and both papers: https://krasforge.github.io/UNK_DeadDrop/
