Notepad++ Hack Detailed Along With the IoCs and Custom Malware Used

**Executive Summary:** A Lotus Blossom (Billbug) espionage campaign compromised Notepad++ infrastructure to distribute an NSIS installer (update.exe) that sideloaded a malicious log.dll, deploying the Chrysalis backdoor which uses custom encryption, API hashing, HTTPS C2 (api.skycloudcenter.com), and advanced loaders (including a Microsoft Warbird-based variant) to target government, telecommunications, aviation, and critical infrastructure across Southeast Asia and Central America; the report provides file and network IoCs, MITRE ATT&CK mappings, and forensic details.