Notepad++ Temp.sh Data Exfiltration

Georg Lauenstein@gsec

•updated Feb 9, 2026•1•0•46

Detects curl commands uploading files to temp.sh service for data exfiltration via update.exe.