logoalt Hacker News

x_maytoday at 3:21 AM1 replyview on HN

It might have been explicitly targeted, but they did say that there were older versions of Notepad ++ with ""insufficient update verification controls" so it might have just been there was only one subset of users actually susceptible to this.


Replies

pavontoday at 3:26 AM

No, the additional update verification was added after this attack was discovered. All Notepad++ installations were vulnerable during the time of the hijacking campaign.