The Fake Notepad++ Plugin That Was Actually a Three-Stage Espionage Chain

CERT-UA links a Russia-aligned group to a campaign that hides inside a real copy of a trusted code editor — decoy PDF included