Notepad++ Hosting Breach Attributed to China-Linked Lotus Blossom Hacking Group

Feb 3, 2026

A China-linked threat actor known as Lotus Blossom has been attributed with medium confidence to the recently discovered compromise of the infrastructure hosting Notepad++.
The attack enabled the state-sponsored hacking group to deliver a previously undocumented backdoor codenamed Chrysalis to users of the open-source editor, according to new findings from Rapid7.
The development comes shortly

Get Free Report & Network Analysis

Please check your email for the free report.