Campaign Exploits Notepad++ Plugins to Covertly Deploy Malware

Ukraine's CERT discovered attacks distributing legitimate Notepad++ bundled with a malicious utility named LunchPoke, disguised as an official plugin. The…

Audit Notepad++ deployments across development environments and train users to verify download sources. Monitor suspicious plugin installations and consider application whitelisting on critical systems. Review system logs for unauthorized LunchPoke instances.