Notepad++ says it was hijacked by Chinese state-sponsored hackers

Date:

Share:

[ad_1]

Last year, the creator of Notepad++ rolled out an update for the text and source code editor after security experts reported that bad actors were hijacking its update mechanism to redirect traffic to malicious servers. It led to users downloading compromised executables that could infect their devices. Now, Don Ho has revealed that multiple security experts investigated the breach and determined that the threat actor “is likely a Chinese state-sponsored group.” He said it explained why experts observed highly selective targeting during the campaign and why only traffic from certain users were redirected so that they would download malicious files. It’s not clear what kind of users were specifically targeted and what the files did to their devices.

The attackers started redirecting traffic from Notepad++ to their servers sometime in June 2025, and that went on until December 2. Their method involved compromising the system at the hosting provider level, though the exact technical mechanism that allowed them to intercept traffic remains under investigation. In addition to releasing a security patch, Notepad++ also migrated to a new hosting provider with much stronger security practices. Ho now encourages anyone who wants to install the app to download version 8.9.1, which comes with the security update, and running the installer manually.

[ad_2]

Source link

━ more like this

Sends shares Q1 2026 business update and product progress

Sends reported Q1 2026 updates sharing news on digital cards, app redesign, ClearBank integration, and fintech industry recognition. Sends, a fintech platform operated by Smartflow...

We swipe our phones all day, and scientists just ranked which ones are the most tiring

We all know staring at your phone for hours isn’t great for mental health. But what about your fingers? Previously, researchers couldn’t measure...

Two suspects have been arrested for allegedly shooting at Sam Altman’s house

OpenAI CEO Sam Altman's house may have been the target of a second attack after San Francisco Police Department arrested two suspects for...

You Can Soon Buy a $4,370 Humanoid Robot on AliExpress

Listing consumer electronics on the internet's large ecommerce marketplaces is a key step in “democratizing” the products, allowing them to be purchased by...
spot_img