opensource·OpensourcebyPierre-Yves Lapersonne Notepad++ hijacked by state-sponsored hackershttps://notepad-plus-plus.org/news/hijacked-incident-info-update/Open linkView original on programming.dev23Comments5Reply
WWurzelfurz feddit.orgHe added a link to a deep dive for the backdoor used in the attack. https://www.rapid7.com/blog/post/tr-chrysalis-backdoor-dive-into-lotus-blossoms-toolkit/5Reply
artyom piefed.social3Hide 3 repliesI'm so confused. It doesn't say anything about "state-sponsored attackers" outside of the headline? What state? Why? Why is a Notepad app connecting to any servers or have credentials at all? 3Reply
Dem Bosain replymidwest.social1Hide 1 replyIt wasn't specifically notepad++ code, but a custom-written updater. That's why it was connecting to the internet.1Reply
vvillage604 replyadultswim.fanI mean, it is n++ code because the updater is part of the code base. They just didn't have the connection to the update server hardened. This was patched in like December, though.2Reply
Calfpupa [she/her] lemmy.mlIt used to be that being a ML (Malicious Linguist) in someones garage was the rage, now we got "Hackers with Chinese characteristics" smh3Reply
5 replies
He added a link to a deep dive for the backdoor used in the attack.
https://www.rapid7.com/blog/post/tr-chrysalis-backdoor-dive-into-lotus-blossoms-toolkit/
I'm so confused.
It wasn't specifically notepad++ code, but a custom-written updater. That's why it was connecting to the internet.
I mean, it is n++ code because the updater is part of the code base. They just didn't have the connection to the update server hardened.
This was patched in like December, though.
It used to be that being a ML (Malicious Linguist) in someones garage was the rage, now we got "Hackers with Chinese characteristics" smh