Notepad++ Update Hijack: A Comedy of Malicious Errors and Security Fixes
Notepad++ 8.8.9 was released to patch a security flaw in its WinGUp tool. This update ensures downloads are only from GitHub and verifies the signature of installers, thwarting any hijacked update URLs attempting to serve malicious software. Users should upgrade to this version to ensure their systems are safeguarded.
Hot Take:
Who knew the humble Notepad++ update could be the gateway to an unwanted cyber fiesta? With version 8.8.9, Notepad++ developers are saying “No thanks!” to party crashers by throwing a security blanket over their update process. Goodbye rogue executables, hello peace of mind!
Key Points:
- Notepad++ faced a security issue where its updater retrieved malicious executables.
- The malicious executable executed commands to collect and exfiltrate device information.
- Suspicions arose that users may have installed unofficial versions or experienced network hijacking.
- Version 8.8.9 introduces code-signing certificate verification for updates.
- Developers and researchers are still investigating the method of traffic hijacking.
Already a member? Log in here