Notepad++ compromised (Lengthy and complicated version, tech enthusiasts please refrain from interrupting)
- Notepad++ update infrastructure was compromised
- Notepad++ suspects Chinese government involvement
- No evidence has been provided to support its suspicion of Chinese government involvement
- Only a “specific target” received malicious Notepad++ messages through infrastructure updates
- No specific information provided about the “specific target”
- No reason provided for its belief that the attack targets were selective
- No information provided about what content was sent to the “specific target”
- The intrusion timeline is unclear
- The “incident began” in June 2025
- The hosting infrastructure shows “September 2, 2025”
- The attacker maintained access until “December 2, 2025”
- Notepad++ claims the intrusion occurred between June and December, contradicting the hosting provider's statement
- No analysis of the “precise technical mechanism” has been released
- No Intrusion Indicators (IoC) have been released