Introduction
A serious problem happened with Notepad++, a popular free text editor used by millions of people.
Hackers linked to the Chinese state were able to take over the Notepad++ update system for many months. This means that some users who tried to update the app were sent to fake, bad servers instead of the real ones.
Table of Contents
What Exactly Happened?
Notepad++ has a feature that checks for updates automatically. But from June to December 2025, hackers changed this update feature so that some users were sent to fake servers.
These fake servers could give wrong or dangerous files instead of real updates.
This was possible because the company that hosts the Notepad++ update service was hacked. So the hackers were able to redirect update traffic. This was not a bug in Notepad++ itself, but in the way updates were delivered.
How Long Did It Last?
The attack lasted around six months — from June 2025 until December 2025.
Even after the hackers were removed in September, they were able to get back access later, until the hosting provider finally fixed the problem.
Who Was Affected?
Not all Notepad++ users were affected. Only some users were sent to the fake update servers. This suggests the attack was targeted, not random.
What Could the Hackers Do?
By controlling the update feature, the hackers could send harmful files instead of real update files. This could allow them to spy on affected computers or steal information.
What Did Notepad++ Do to Fix It?
Once the problem was found:
- The Notepad++ team moved to a safer hosting service.
- They changed the update system to make it harder for hackers to interfere.
- New Notepad++ versions now check digital signatures before installing any update. This helps make sure updates are real and safe.
What Should You Do If You Use Notepad++?
If you use Notepad++, follow these steps:
- Update to the latest version of Notepad++.
- Only download updates from the official Notepad++ website.
- If you updated Notepad++ between June and December 2025, run a virus scan on your computer to stay safe.
Why Is This Important?
This kind of attack is called a supply chain attack, where hackers don’t break the software itself but break the update system to spread harmful files.
Even trusted software like notepad++ can become dangerous if its update system is not protected well. For more visit universityscope.com
