Ukraine's CERT has uncovered attacks distributing an archive containing the legitimate Notepad++ application and a malicious utility called LunchPoke disguised as a plugin to establish persistence. [...]
Hackers abuse Notepad++ plugins to stealthily install malware
Summary + source link. No paywalls, no tracking.