Notepad++ Hijacked by State-Sponsored Hackers

https://notepad-plus-plus.org/news/hijacked-incident-info-update/

45 points · 12 comments · view on lemmy.world

12 Comments

flandish@lemmy.world · 9 pts · 202d

know this was not their fault but i haven’t trusted np++ since the charlie hebdo stunt that made it look like the app was a virus.

ArbitraryValue@sh.itjust.works · 5 pts · 202d (1 reply)

So what does this mean for ordinary users?

Ephera@lemmy.ml · 2 pts · 202d

There's a chance malware was downloaded onto your system through Notepad++'s update mechanism.

The post does specify:

Traffic from certain targeted users was selectively redirected to attacker-controlled served malicious update manifests.

So, I guess, if you're ordinary enough to not be targeted by state-sponsored hackers, you might not be affected, but it's not guaranteed.

TheTechnician27@lemmy.world · -8 pts · 202d (8 replies)

According to the analysis provided by the security experts, the attack involved infrastructure-level compromise that allowed malicious actors to intercept and redirect update traffic destined for notepad-plus-plus.org. [...] The attackers specifically targeted Notepad++ domain with the goal of exploiting insufficient update verification controls that existed in older versions of Notepad++.

🪟h w🪟w, every🪟ne d🪟ing their 🪟wn thing with updates actually isn't a g🪟🪟d idea? C🪟uld've never guessed.

cannedtuna@lemmy.world · 3 pts · 202d (7 replies)

I’m sorry, but can you give me plain English for those that don’t speak emoji? Or at least a language I can run through a translator?

NotMyOldRedditName@lemmy.world · 8 pts · 202d (1 reply)

Pretty sure it says

Oh wow, everyone doing their own thing with updates isn't a good idea? Could've never guessed.

cannedtuna@lemmy.world · -3 pts · 202d

Thanks. I tried to read it but idk just didn’t click

Rentlar@lemmy.ca · 5 pts · 202d (1 reply)

Thanks to your comment, I stopped reading it correctly and started reading each as "Windows" in the style of Steve Ballmer remixed into this YouTubePoop music video.

Scirocco@lemmy.world · 1 pts · 202d

Glorious YouTubePoop

Thank you.

TheTechnician27@lemmy.world · -4 pts · 202d (2 replies)

If it wasn't obvious that every 'o' was replaced with a window emoji to lampshade how I'm referring to Windows making each individual application figure out how they do updates, I don't know what to tell you.

NotMyOldRedditName@lemmy.world · 3 pts · 202d

I translated it for them, but I didn't even realize it was all o's

cannedtuna@lemmy.world · 0 pts · 202d

I see. Idk why that didn’t click for me.