Notepad++ Malicious DNS Query

Georg Lauenstein@gsec

•updated Feb 8, 2026•2•0•61

Detects DNS queries to known malicious domains used in Notepad++ supply chain attack for C2 communication and payload delivery.