ShadowHammer — Campaign Analysis & Threat Activity

Related Threat Clusters

• State-Sponsored Hackers Compromise Notepad++ Update Mechanism

  Notepad++ has been hijacked by state-sponsored hackers, specifically a likely Chinese threat actor. The attackers compromised the software's update mechanism between June and December 2025, allowing them to redirect…

  100 articles · Updated February 2, 2026
• ASUS Live Update CVE-2025-59374: Historic Vulnerability Misinterpreted as Current Threat

  The ASUS Live Update vulnerability, identified as CVE-2025-59374, relates to a historic supply-chain attack affecting an End-of-Life software product. Recent media coverage has inaccurately suggested that this…

  2 articles · Updated December 22, 2025

Recent Intelligence Reports

• WARNING: Notepad++ Hijacked By China State-Sponsored Threat Actors — Linkedin · February 2, 2026
• Not all CISA-linked alerts are urgent: ASUS Live Update CVE-2025 — Bleepingcomputer · December 22, 2025
• CISA flags ASUS Live Update CVE, but the attack is years old — Bleepingcomputer · December 22, 2025

Related Entities