Hackers abuse Notepad++ plugins to stealthily install malware

Published on July 23, 2026

Ukraine's CERT has uncovered attacks distributing an archive containing the legitimate Notepad++ application and a malicious utility called LunchPoke disguised as a plugin to establish persistence. [...]