▲ 516 ▼ Notepad++ Hijacked by State-Sponsored Hackers (notepad-plus-plus.org) submitted 9 months ago by Beep@lemmus.org to c/technology@lemmy.world 53 comments fedilink hide all child comments
[+] MangoCats@feddit.it 1 point 9 months ago (1 child) [removed by mod] permalink fedilink source parent hideshow 1 child comment replies: [–] floofloof@lemmy.ca 2 points 9 months ago (-1 children) the safe thing to do is uninstall, then download from the new (theoretically more secure) website and install the new (theoretically more secure) 8.9.1. That won't rescue your system if it is already compromised though. It will just prevent it from being newly compromised in this manner. permalink fedilink source parent hideshow -1 child comments load more comments (-1 replies) [–] how_we_burned@lemmy.zip 2 points 9 months ago Unfortunately i do work for a targeted company (we do a lot of secret squirrel stuff) in south East Asia. We get a lot of attacks. I was looking at the attack and malware they inject (there is a blog post link on the notepad++ notice) which pointed out how the attack worked. Apparently they run a service called bluetoothservice.exe. I didn't see anything like that or any the other stuff they said gets created. But then again finding malware isn't my bag so who knows. Pretty sure my updates came via nanite installer so I'm hoping I wasn't targeted. permalink fedilink source parent
[–] floofloof@lemmy.ca 2 points 9 months ago (-1 children) the safe thing to do is uninstall, then download from the new (theoretically more secure) website and install the new (theoretically more secure) 8.9.1. That won't rescue your system if it is already compromised though. It will just prevent it from being newly compromised in this manner. permalink fedilink source parent hideshow -1 child comments load more comments (-1 replies)
[–] how_we_burned@lemmy.zip 2 points 9 months ago Unfortunately i do work for a targeted company (we do a lot of secret squirrel stuff) in south East Asia. We get a lot of attacks. I was looking at the attack and malware they inject (there is a blog post link on the notepad++ notice) which pointed out how the attack worked. Apparently they run a service called bluetoothservice.exe. I didn't see anything like that or any the other stuff they said gets created. But then again finding malware isn't my bag so who knows. Pretty sure my updates came via nanite installer so I'm hoping I wasn't targeted. permalink fedilink source parent