pez comments on Notepad++ Hijacked by State-Sponsored Hackers

Our Rules

Only tech related news or articles.

Mod approved content bots can post up to 10 articles per day.

Threads asking for personal tech support may be deleted.

Politics threads may be removed.

No memes allowed as posts, OK to post as comments.

Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.

Check for duplicates before posting, duplicates may be removed

Accounts 7 days and younger will have their posts automatically removed.

[–] pez@piefed.blahaj.zone 1 point 6 months ago (2 children)

Fair point. I was assuming the malicious payload would come along with an update on order to hide, but it's also possible that the malicious payload was delivered without any update to notepad++.

I've not seen any IOCs published have you?

permalink

fedilink

source

parent

hideshow 4 child comments

[–] AceBonobo@lemmy.world 1 point 6 months ago (1 child)

I'm not sure what you mean. The article states there were remote hands on keyboard noticed in multiple companies. That's how the vulnerability was discovered.

permalink

fedilink

source

parent

hideshow 2 child comments

[–] pez@piefed.blahaj.zone 1 point 6 months ago* (last edited 6 months ago)

I mean IOCs that you can scan for in an environment to see if a machine has been compromised using this vulnerability. Something that tells you if you need to do additional remediation on a machine or just update notepad++ and move on.

Edit: Found some! This is the type of info I was thinking of when I used IOCs

https://securelist.com/notepad-supply-chain-attack/118708/

permalink

fedilink

source

parent