Notepad++ have released a new version to fix the auto update process being hijacked notepad-plus-plus.org/news/v88…
I reported the vulnerability, it is being hijacked by threat actors in China. doublepulsar.com/small-numbers…
Peter Vágner reshared this.
Kevin Beaumont
in reply to Kevin Beaumont • • •Kevin Beaumont
in reply to Kevin Beaumont • • •Kevin Beaumont
in reply to Kevin Beaumont • • •Impacted boxes have things like FatBeehive and other tools installed, there’s hunting guides in that blog.
Notepad++ author really good btw, quick turn around.
Kevin Beaumont
in reply to Kevin Beaumont • • •Kevin Beaumont
in reply to Kevin Beaumont • • •Kevin Beaumont
in reply to Kevin Beaumont • • •Kevin Beaumont
in reply to Kevin Beaumont • • •Kevin Beaumont
in reply to Kevin Beaumont • • •Notepad++ have today confirmed their auto process was compromised by Chinese nation state threat actors, in a supply chain hack: notepad-plus-plus.org/news/hij…
This backs up my blog from late last year, with #GAYINT threat actor mapping to Funky Stamen.
The infrastructure and update mechanisms have since been tightened. For what it’s worth - entry was to telcos and financial services with interests aligned to China. Notepad++ dev did a great job treating issue seriously.
Notepad++ Hijacked by State-Sponsored Hackers | Notepad++
notepad-plus-plus.orgreshared this
Jonathan reshared this.