Rapid7 links China-linked Lotus Blossom to a 2025 Notepad++ hosting breach that delivered the Chrysalis backdoor via hijacked ...

The developer did not specify when they became aware of the attack, but said that “all attacker access was definitively ...

It's believed that, between June and November 10/December 2, 2025 (independent security experts and its hosting provider disagree on the exact timings), a shared hosting server was compromised, ...

A Chinese-linked cyberespionage group named Lotus Blossom hijacked the update process of Notepad++ to target specific users. Gaining access in June 2025, they maintained control until December that ...

The hosting provider's compromise allowed attackers to deliver malware through tainted software updates for six months.

Previously Clawdbot and then Moltbot, this agent can take actions without you having to prompt it and make those decisions by accessing large swaths of your digital life.