LUNCHPOKE: Malicious DLL Disguised as Notepad++ Plugin
LUNCHPOKE is a malicious DLL (NppExport.dll) that unpacks a RAR archive containing BURNYBEAR and MATCHBOIL.V2. It sets up persistence via a scheduled…
Tag: LUNCHPOKE
Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks
The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of a new campaign involving a malicious program disguised as a Notepad++…