Rapid7 links China-linked Lotus Blossom to a 2025 Notepad++ hosting breach that delivered the Chrysalis backdoor via hijacked ...
Notepad++ is a favorite of programmers and other power users, but its auto-update function was compromised for months in 2025 ...
Notepad++ says its update system was reportedly hijacked for months in a targeted cyber campaign linked to suspected Chinese ...
The developer did not specify when they became aware of the attack, but said that “all attacker access was definitively ...
Infrastructure delivering updates for Notepad++—a widely used text editor for Windows—was compromised for six months by suspected China-state hackers who used their control to deliver backdoored ...
Attackers had specifically delivered malware to systems using the Notepad++ updater. Investigations point to state actors.
State-sponsored threat actors compromised the popular code editor's hosting provider to redirect targeted users to malicious ...
The popular Notepad alternative was hijacked by bad actors for several months in 2025, but the latest update appears to solve ...
The group targets telecoms, critical infrastructure - all the usual high-value orgs Security researchers have attributed the ...