How Chinese hackers used Notepad++ to spy on companies doing business in East Asia

Notepad++ users faced a serious threat as Chinese state-sponsored hackers compromised update servers for half of 2025, distributing malware named Chrysalis. Targeting organizations with East Asian business ties, attackers gained keyboard access. The vulnerability was exploited through weak update verification, with the breach fully contained only on December 2nd.

How Chinese hackers used Notepad++ to spy on companies doing business in East Asia
Notepad++ users faced a serious threat as Chinese state-sponsored hackers compromised update servers for half of 2025, distributing malware named Chrysalis. Targeting organizations with East Asian business ties, attackers gained keyboard access. The vulnerability was exploited through weak update verification, with the breach fully contained only on December 2nd.