The Rollerball Notepad++ Plugin repo contains code for a benignware (pseudo malware) plugin for the Notepad++ editor based on this plugin template. The plugin purports to be an AutoSave feature, but in fact it exfiltrates file content based on keywords to a webserver that you specify. This code was designed as a way to test detection capabilities.
Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock (
) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
