{"id":2247,"date":"2026-02-03T00:43:27","date_gmt":"2026-02-02T20:43:27","guid":{"rendered":"https:\/\/www.actutech.app\/notepad-updates-got-hijacked-for-months-and-could-have-spied-for-china\/"},"modified":"2026-02-03T00:43:27","modified_gmt":"2026-02-02T20:43:27","slug":"notepad-updates-got-hijacked-for-months-and-could-have-spied-for-china","status":"publish","type":"post","link":"https:\/\/www.actutech.app\/en\/notepad-updates-got-hijacked-for-months-and-could-have-spied-for-china\/","title":{"rendered":"Notepad++ updates got hijacked for months and could have spied for China"},"content":{"rendered":"<figure>\n<p><img decoding=\"async\" alt=\"Illustration of a computer screen with a blue exclamation point on it and an error box.\" data-caption=\"\" data-portal-copyright=\"Photo by Amelia Holowaty Krales \/ The Verge\" data-has-syndication-rights=\"1\" src=\"https:\/\/platform.theverge.com\/wp-content\/uploads\/sites\/2\/chorus\/uploads\/chorus_asset\/file\/23318435\/akrales_220309_4977_0232.jpg?quality=90&amp;strip=all&amp;crop=0,0,100,100\" \/><figcaption>\n\t\t<\/figcaption><\/p><\/figure>\n<p class=\"has-text-align-none\">Users of the text and code editor Notepad++ may have unknowingly downloaded a malicious update for the app after its shared hosting servers were hijacked last year. On Monday, the app&rsquo;s developer, Don Ho, <a href=\"https:\/\/notepad-plus-plus.org\/news\/hijacked-incident-info-update\/\" target=\"_blank\" rel=\"noopener\">posted an update on the attack<\/a> with more details, including that the hackers were \u00ab\u00a0likely a Chinese state-sponsored group\u00a0\u00bb and that the app&rsquo;s servers were vulnerable for roughly six months from June through December 2nd, 2025. <\/p>\n<p class=\"has-text-align-none\">The post explains that the hijacking occurred on the app&rsquo;s unnamed, now-former hosting provider&rsquo;s end, stating that \u00ab\u00a0Traffic from certain targeted users was selectively redirected to attacker-controlled served malic \u2026<\/p>\n<p><a href=\"https:\/\/www.theverge.com\/tech\/872462\/notepad-plus-plus-server-hijacking\" target=\"_blank\" rel=\"noopener\">Read the full story at The Verge.<\/a><\/p>","protected":false},"excerpt":{"rendered":"<p>Users of the text and code editor Notepad++ may have unknowingly downloaded a malicious update for the app after its [&hellip;]<\/p>","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-2247","post","type-post","status-publish","format-standard","hentry","category-non-classe"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.actutech.app\/en\/wp-json\/wp\/v2\/posts\/2247","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.actutech.app\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.actutech.app\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.actutech.app\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.actutech.app\/en\/wp-json\/wp\/v2\/comments?post=2247"}],"version-history":[{"count":0,"href":"https:\/\/www.actutech.app\/en\/wp-json\/wp\/v2\/posts\/2247\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.actutech.app\/en\/wp-json\/wp\/v2\/media?parent=2247"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.actutech.app\/en\/wp-json\/wp\/v2\/categories?post=2247"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.actutech.app\/en\/wp-json\/wp\/v2\/tags?post=2247"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}