LUNCHPOKE: Malicious DLL Disguised as Notepad++ Plugin
LUNCHPOKE is a malicious DLL (NppExport.dll) that unpacks a RAR archive containing BURNYBEAR and MATCHBOIL.V2. It sets up persistence via a scheduled…
Tag: Notepad++
Notepad++: Free Source Code Editor
Notepad++ is a free source code editor that was abused in UAC-0099 attacks by bundling a malicious plugin (NppExport.dll) to deliver malware.
Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks
The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of a new campaign involving a malicious program disguised as a Notepad++…
MATCHBOIL.V2: C#-Based Loader Delivered via Fake Notepad++ Plugin
MATCHBOIL.V2 is a modified version of the MATCHBOIL malware, a C#-based loader capable of delivering secondary payloads. It was deployed in attacks…