{"id":156248,"date":"2026-02-02T11:11:55","date_gmt":"2026-02-02T09:11:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ataka-na-proekt-notepad-privedshaya-k-vyborochnoj-podmene-obnovlenij"},"modified":"2026-02-02T11:11:55","modified_gmt":"2026-02-02T09:11:55","slug":"ataka-na-proekt-notepad-privedshaya-k-vyborochnoj-podmene-obnovlenij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/ataka-na-proekt-notepad-privedshaya-k-vyborochnoj-podmene-obnovlenij","title":{"rendered":"Angreb p\u00e5 Notepad++-projektet, der f\u00f8rte til selektiv \u00e6ndring af opdateringer","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Udviklerne af Notepad++, en open source kodeeditor til Windows platformen, har offentliggjort en analyse af en h\u00e6ndelse, der resulterede i, at netv\u00e6rksinfrastrukturen hos udbyderen blev kompromitteret, og nogle brugere af Notepad++ modtog manipulerede eksekverbare filer, der blev hentet via WinGUp's automatiske opdateringssystem. <\/p>\n

Angrebet blev udf\u00f8rt ved selektiv omdirigering af trafik mellem brugeren og opdateringsserveren. Manipulationen var mulig p\u00e5 grund af en s\u00e5rbarhed i verifikations- og integritetskontrolmekanismen for den hentede opdatering. Angriberen, der kunne infiltrere transittrafikken, kunne manipulere opdateringsmanifestet og initiere en anmodning om at hente sin falske opdatering samt de dertil knyttede metadatakontrol. <\/p>\n

Yderligere analyser viste, at angrebet blev udf\u00f8rt p\u00e5 infrastrukturelt niveau hostingudbyder<\/a>, hvilket gjorde det muligt for angribere at opfange og omdirigere trafik, der var rettet mod dom\u00e6net notepad-plus-plus.org. Omdirigeringen blev kun udf\u00f8rt for bestemte brugere, der modtog et forfalsket manifest med oplysninger om opdateringer. De f\u00f8rste spor af de angribende aktiviteter er dateret til juni 2025, og de sidste til 10. november, men muligheden for at udf\u00f8re angrebet forblev til 2. december. <\/p>\n

If\u00f8lge de oplysninger, der blev givet af udbyderen, blev angrebet muligt p\u00e5 grund af et hackerangreb p\u00e5 serveren for delt hosting, hvor webstedet notepad-plus-plus.org var placeret. Den 2. september efter en opdatering blev s\u00e5rbarheden lukket, men angriberne havde allerede f\u00e5et adgangskoderne til at forbinde til en af de interne tjenester, hvilket gjorde det muligt for dem at omdirigere anmodningerne til scriptet \u00abhttps:\/\/notepad-plus-plus.org\/getDownloadUrl.php\u00bb indtil 2. december. servere<\/a>. Den 2. december blev opdateringsmanipulationen opdaget, og udbyderen blokerede adgangen for angriberne. Efter h\u00e6ndelsen blev Notepad++'s hjemmeside overflyttet til en anden hostingudbyder, der er mere omhyggelig med sikkerhed. <\/p>\n

I version 8.8.9 af Notepad++ er der tilf\u00f8jet obligatoriske kontroller, ikke kun for digitale signaturer, men ogs\u00e5 for certifikater til de filer, der downloades, for at blokere for opdateringsmanipulation. I den forventede udgivelse 8.9.2, der kommer om en m\u00e5ned, vil der desuden blive tilf\u00f8jet en kontrol af den digitale signatur for XML-manifestet (XMLDSig), der returneres fra opdateringsleveringsserveren.
\n
Kilde: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Notepad++, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0430 \u043a\u043e\u0434\u0430 \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Windows, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0440\u0430\u0437\u0431\u043e\u0440 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0431\u044b\u043b\u0430 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0441\u0435\u0442\u0435\u0432\u0430\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430 \u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Notepad++ \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043f\u043e\u0434\u043c\u0435\u043d\u0451\u043d\u043d\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u044b\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 WinGUp. \u0410\u0442\u0430\u043a\u0430 \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 \u0432\u044b\u0431\u043e\u0440\u043e\u0447\u043d\u043e\u0435 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043c\u0435\u0436\u0434\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439. \u041f\u043e\u0434\u043c\u0435\u043d\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0439 \u0438\u0437-\u0437\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-156248","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Angreb p\u00e5 Notepad++-projektet, der f\u00f8rte til selektiv manipulation af opdateringer | ProHoster","description":"Udviklerne af Notepad++, den \u00e5bne kodeeditor til Windows-platformen, har offentliggjort en analyse af h\u00e6ndelsen, der resulterede i kompromittering af netv\u00e6rksinfrastrukturen hos udbyderen, hvilket p\u00e5virkede nogle brugere af Notepad++.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/ataka-na-proekt-notepad-privedshaya-k-vyborochnoj-podmene-obnovlenij","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 \u043d\u0430 \u043f\u0440\u043e\u0435\u043a\u0442 Notepad++, \u043f\u0440\u0438\u0432\u0435\u0434\u0448\u0430\u044f \u043a \u0432\u044b\u0431\u043e\u0440\u043e\u0447\u043d\u043e\u0439 \u043f\u043e\u0434\u043c\u0435\u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Notepad++, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0430 \u043a\u043e\u0434\u0430 \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Windows, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0440\u0430\u0437\u0431\u043e\u0440 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0431\u044b\u043b\u0430 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0441\u0435\u0442\u0435\u0432\u0430\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430 \u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Notepad++.","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/ataka-na-proekt-notepad-privedshaya-k-vyborochnoj-podmene-obnovlenij","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-02-02T09:11:55+00:00","article:modified_time":"2026-02-02T09:11:55+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"156248","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 16:54:46","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-02 09:11:56","updated":"2026-02-09 16:54:46","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/156248","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=156248"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/156248\/revisions"}],"predecessor-version":[{"id":159236,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/156248\/revisions\/159236"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=156248"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=156248"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=156248"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}