schizoidman@lemmy.zip to Technology@lemmy.worldEnglish · edit-210 天前Notepad++ updater installed malwarewww.heise.deexternal-linkmessage-square46linkfedilinkarrow-up1355arrow-down114file-textcross-posted to: cybersecurity@sh.itjust.works
arrow-up1341arrow-down1external-linkNotepad++ updater installed malwarewww.heise.deschizoidman@lemmy.zip to Technology@lemmy.worldEnglish · edit-210 天前message-square46linkfedilinkfile-textcross-posted to: cybersecurity@sh.itjust.works
minus-squareSteveTech@aussie.zonelinkfedilinkEnglisharrow-up5·10 天前Maybe it was used as some sort of privilege escalation? E.g. NP++ downloads an XML file to %TEMP%, some already present malware modifies it, then GUP downloads a payload and executes it with administrator permissions.
Maybe it was used as some sort of privilege escalation? E.g. NP++ downloads an XML file to %TEMP%, some already present malware modifies it, then GUP downloads a payload and executes it with administrator permissions.