MirrorFace APT Uses Custom Malware to Exploit Windows Sandbox and Visual Studio Code

The MirrorFace APT group's exploitation of Windows Sandbox represents a sophisticated evolution in attack techniques that leverage legitimate operating system features to evade detection.