CNCERT: Risk Warning Regarding the "Black Cat" Gang's Use of Search Engines to Spread Counterfeit Notepad++ Download Remote Control Backdoors
CNCERT and Microstep Online jointly detected a cyberattack campaign launched by the "Black Cat" criminal gang. This gang uses search engine SEO (Search Engine Optimization) techniques to push meticulously crafted phishing websites to the top of search engine keyword results. After visiting these high-ranking phishing pages, users are lured by carefully designed download pages, attempting to download software installation packages bundled with malicious programs. Once installed, the program implants a backdoor Trojan without the user's knowledge, leading to the theft of sensitive data from their host computer by attackers.
Pulse ID: 6960d767ed2466fdb23d97e5
Pulse Link: https://otx.alienvault.com/pulse/6960d767ed2466fdb23d97e5
Pulse Author: AlienVault
Created: 2026-01-09 10:24:39
Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#BackDoor #CyberAttack #CyberSecurity #Edge #InfoSec #Notepad #OTX #OpenThreatExchange #Phishing #RAT #Trojan #Word #bot #AlienVault