Notepad++ Attack Breakdown Reveals Sophisticated Malware and Actionable IoCs

## Executive Summary: This report details a sophisticated espionage campaign attributed to Chinese APT "Lotus Blossom" that compromised Notepad++ distribution to install a custom backdoor named Chrysalis, combining DLL sideloading, custom crypto/deobfuscation, NtQuerySystemInformation abuse, and Cobalt Strike loaders; it includes command capabilities, persistence mechanisms, C2 endpoints, and a comprehensive set of file and network IoCs for detection and response.