TCH MKT HA Harsh_Exploits The Fake Notepad++ Plugin That Was Actually a Three-Stage Espionage Chain CERT-UA links a Russia-aligned group to a campaign that hides inside a real copy of a trusted code editor — decoy PDF included