23
Notepad++ hijacked by state-sponsored hackers (notepad-plus-plus.org)
submitted 6 months ago by [M] to c/opensource@programming.dev
5 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 6 months ago (2 children)

I'm so confused.

  1. It doesn't say anything about "state-sponsored attackers" outside of the headline? What state? Why?
  2. Why is a Notepad app connecting to any servers or have credentials at all?
  • permalink
  • fedilink
  • source
  • hideshow 4 child comments
    •
  • [–] 1 point 6 months ago (1 child)

    It wasn't specifically notepad++ code, but a custom-written updater. That's why it was connecting to the internet.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •