Notepad++ Hijacked by State-Sponsored Hackers | Notepad++ (notepad-plus-plus.org)
from cm0002@digipres.cafe to cybersecurity@infosec.pub on 02 Feb 17:56
https://digipres.cafe/post/100303

#cybersecurity

threaded - newest

jcr@jlai.lu on 02 Feb 19:27 collapse

What the hell this is so frustrating, basically this free and opensource software has been victim of an attack on their hosting provider !! It is not even the software that is attacked anymore. Does anyone remember which free software was attacked through social engineering (it took years for the attacker to become the confident of the maintainer) then the exploit discovered within a few hours by a random microsoft engineer that checked why the library was a few microsecond slower than usual ? Because now it looks like next level

leviathan@feddit.org on 02 Feb 19:52 collapse

The XZ utils backdoor

jcr@jlai.lu on 08 Feb 17:06 collapse

Yes this one ! Thank you