Notepad++ hijacked by state-sponsored actors
notepad-plus-plus.org
Notepad++ hijacked by state-sponsored actors
1–10 of 560 posts
Re: Notepad++ hijacked by state-sponsored actors
#2Wow. I'd love to know more how the targeted systems were actually compromised.
Re: Notepad++ hijacked by state-sponsored actors
#3Probably related to this: https://notepad-plus-plus.org/news/v869-about-taiwan/
Re: Notepad++ hijacked by state-sponsored actors
#4i always worry about tools like this, maintained by small teams, that are so universal that even if only a small fraction of installs are somehow co-opted by malicious actors, you have a wide open attack surface on most tech companies.
e.g. iTerm, Cyberduck, editors of all shades, various VSCode extensions, etc.
Re: Notepad++ hijacked by state-sponsored actors
#5Wow. I'd love to know more how the targeted systems were actually compromised.
Probably backdooring end user machines by pushing updates with vulnerabilities for the purpose of spying, data exfiltration & control.
Re: Notepad++ hijacked by state-sponsored actors
#6Probably related to this: https://notepad-plus-plus.org/news/v869-about-taiwan/
Yeah, Notepad++ is known for political messaging in their updates. Taiwan, Ukraine, etc.
Re: Notepad++ hijacked by state-sponsored actors
#7why does this read like it was written by a state-sponsored actor
Re: Notepad++ hijacked by state-sponsored actors
#8Wow. I'd love to know more how the targeted systems were actually compromised.
Agreed. Supply chain attacks are scary. I open all sorts of secrets in NPP - did they all get leaked?
Re: Notepad++ hijacked by state-sponsored actors
#9So the hosting provider was hacked? Who was their hosting provider?
This is also why update signatures should be validated against a different server; it would require hackers to control bother servers to go undetected
Re: Notepad++ hijacked by state-sponsored actors
#10Probably related to this: https://notepad-plus-plus.org/news/v869-about-taiwan/
And this https://notepad-plus-plus.org/news/v781-free-uyghur-edition/
I distinctly remember their GH page being flooded with issues written in Chinese.