Ukraine's CERT has uncovered attacks distributing an archive containing the legitimate Notepad++ application and a malicious utility called LunchPoke disguised as a plugin to establish persistence. [...]
Hackers abuse Notepad++ plugins to stealthily install malware
Résumé + lien vers la source. Sans paywall, sans tracking.