Georgy Kucherin on X: "It turned out there are many more payloads used in the Notepad++ attack! To stay undetected, its masterminds were COMPLETELY changing execution chains about every month. Here are more IPs used in the attack: 45.76.155[.]202 45.32.144[.]255 Read below for many other IoCs! [1/8] https://t.co/BGrMchxGjs" / X

https://x.com/kucher1n/status/2018626488434843674?s=46&t=C0_T_re0wRP_NfKa27Xw9w