News

Notepad++ hijacking blamed on Chinese Lotus Blossom crew behind Chrysalis backdoor

The Register · last updated

The group targets telecoms, critical infrastructure — all the usual high-value orgs

Security researchers have attributed the Notepad++ update hijacking to a Chinese government-linked espionage crew called Lotus Blossom (aka Lotus Panda, Billbug), which abused weaknesses in the update infrastructure to gain a foothold in high-value targets by delivering a newly identified backdoor dubbed Chrysalis.…