202/update/update.exe,” which was then launched by the legitimate Notepad++ updater process WinGUp.
The variety in infection chains highlights the attackers’ creativity and their skillful avoidance of detection, making this a significant threat to the software ecosystem.