supply-chain

threat-intelligence February 2, 2026 · 6 min read

Lotus Blossom Turned Notepad++ Into a Six-Month Espionage Pipeline

Chinese APT Lotus Blossom hijacked Notepad++ updates for six months to deploy the custom Chrysalis backdoor targeting telecom and government organizations.