CrashFix crashes browsers to coerce users into executing commands that deploy a Python RAT, abusing finger.exe and portable Python to evade detection and persist on high‑value systems.
Rapid7 links China-linked Lotus Blossom to a 2025 Notepad++ hosting breach that delivered the Chrysalis backdoor via hijacked updates, fixed in v8.8.9 ...
State-sponsored hackers' are being blamed for compromising the popular alternative to Windows Notepad over a period of six months last year.
If you have accounts on any of these services, now's a good time to check your security settings. Plus more from a busy week ...
The hosting provider's compromise allowed attackers to deliver malware through tainted software updates for six months.
Notepad++ update servers were compromised for 6 months in 2025. Learn how the Chrysalis backdoor targeted users and why you must manually update to version 8.9.1 now.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results