Step 1: Build an imposter site that delivers safe files Step 2: SEO optimize to get good Google rankings Step 3: Build a good reputation that many people star

Step 1: Build an imposter site that delivers safe files Step 2: SEO optimize to get good Google rankings Step 3: Build a good reputation that many people start to think is the real site. Step 4: Wait Step 5: Swap the legit download links to malicious ones. A tool like Noptepad++ is used by IT admins and developers, so just like xz it’s a juicy target for malicious actors.