logo

Notepad++ Users, You May Have Been Hacked by China

ID: d7e5bf6e-580d-5191-9322-f3080f934a9b

STIX ID: report--d7e5bf6e-580d-5191-9322-f3080f934a9b

Feed Name: WIRED Security

Threat Score
90/100

Date Published: 2026-02-04

Date Updated: 2026-04-26

Author: Dan Goodin, Ars Technica

...
...

- Notepad++'s update infrastructure was hijacked from June to December by suspected China-state actors who selectively redirected update traffic to malicious servers and delivered backdoored installers containing a custom backdoor named Chrysalis, enabling hands-on intrusions in targeted networks; developers later strengthened updater verification and regained control.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.