Threat actor
Lotus Blossom
Tracked by CyberSIXT since 3 Feb
- Articles · all time
- 4
- Articles · last 30 days
- 0
- CVEs exploited · attributed
- 0
- Research reports · all time
- 0
4 articles from 4 outlets since 3 Feb; the latest 234 days ago.
- Article
- First report
Show as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Thu 5 Mar · 22:45 UTC | dti.domaintools.com | Lotus Blossom supply chain attack hits Notepad++ updates |
| Thu 5 Feb · 01:55 UTC | SecurityOnline | Supply Chain Poison: Lotus Blossom Hits Notepad++ to Deploy “Chrysalis” |
| Tue 3 Feb · 10:35 UTC | Security Affairs | Notepad++ infrastructure hack likely tied to China-nexus APT Lotus Blossom |
| Tue 3 Feb · 05:30 UTC | The Hacker News | Notepad++ Hosting Breach Attributed to China-Linked Lotus Blossom Hacking Group |
Who reported 4 outlets
- The Hacker News1
- Security Affairs1
- SecurityOnline1
- dti.domaintools.com1
Names and sources
- LOTUS PANDA
- Named by CyberSIXT coverage
- Lotus Blossom
- Named by CyberSIXT coverage
- G0030
- Named by MITRE ATT&CK®
- Lotus Blossom supply chain attack hits Notepad++ updatesdti.domaintools.com
- Supply Chain Poison: Lotus Blossom Hits Notepad++ to Deploy “Chrysalis”SecurityOnline
- Notepad++ infrastructure hack likely tied to China-nexus APT Lotus BlossomSecurity Affairs
- Notepad++ Hosting Breach Attributed to China-Linked Lotus Blossom Hacking GroupThe Hacker News · first in our coverage