Notepad++ 8.9.9 fixes six flaws including plugin command execution
The local escalation needs NppExec, an elevated editor, and a second instance; MIME Tools 3.2 fixes separate overflows.
Stories per day · 30 days
2 RSS
3 stories, newest first · one card per story
Stories tagged #notepad-plus-plus
PAPERMILL Hackers Abuse Signed Notepad++ to Deploy VenomRAT in Tax Audit Attacks
PAPERMILL phishing campaign abuses a signed Notepad++ copy and tax-audit lures to deploy VenomRAT against targets in India.
1
PAPERMILL Malware Campaign Abuses Signed Notepad++ to Deliver VenomRAT to Windows Users
JUMPSEC tracks PAPERMILL, a China-nexus phishing campaign using a signed Notepad++ binary, libcurl.dll sideloading, and Donut loaders to deploy VenomRAT against Indian tax-audit targets.
2