Notepad++, the popular open source text editor, calls for help to take down copycat website, notepad[.]more, which, although harmless, could pose a threat to user security.
The most French of text editors, free and open source Notepad++, is causing some commotion within its own community. Indeed, its original developer, Don Ho, recently drew attention to a copycat website, notepad[.]plus, which uses the project’s branding and even ranks well in search engine results.
Although the website currently redirects users to the official Notepad++ download page and clarifies that it is an unofficial fan site for the original, Don Ho and an entire community fear that it poses threats to the security in the future.
The threat of malware and traffic hijacking
The website in question, notepad[.]more, has managed to fool many users into believing that it is the official Notepad++ website. This confusion led users to alert Notepad++ developer Don Ho, who received numerous complaints via email, social media, and forums about the website.
According to him, the website appears prominently in search results when users search for “download Notepad++,” confirming the reach and impact of this copycat.
Yet the misleading website has a disclaimer at the bottom of the page stating that it is a “ unofficial fan website ” And ” unaffiliated » to the Notepad++ project. Additionally, the website claims to be created only “ for general information and educational purposes “, indicates that any information found on the website is their personal opinions and does not purport to reflect the opinions or views of Don Ho or its representatives. But to no avail, this statement was not enough to clear up the confusion among users.
It should be noted that the fansite currently redirects visitors to the download page for official Notepad++ versions hosted at notepad-plus-plus.org. A redirection which is not enough, this time, to calm Don Ho’s fears. This site contains hidden intentions […] and is riddled with malicious ads on every page “, he says. These advertisements could trick unsuspecting Notepad++ users into clicking on links that generate revenue for the unofficial website’s administrators. The developer also maintains that the “ real goal » of what he called a “ parasite website ” is of ” divert traffic from the legitimate Notepad++ website, notepad-plus-plus.org “, which could potentially compromise user security and harm the integrity of the Notepad++ community.
The community’s call to action
Faced with this threat, Don Ho appealed for help to take down the copycat website. He urges everyone to report the website via the web form “ report malware » from Google Safebrowsing. This call to action is an important reminder of the need for users to be vigilant and proactive when browsing the Internet. It is essential to verify the authenticity of websites before downloading software or sharing personal information.
“ Your vigilance is important. Let’s stand together to protect our community and maintain a safe online ecosystem.
We thank you for your quick action “, he urges.
Voices are being raised to point out that the real problem could be a threat to Notepad++’s control of software maintenance. This situation comes in a context where large-scale open source projects have been compromised by trusted developers gone rogue, such as most recently the mysterious Jia Tan who introduced a backdoor discovered in time by a Microsoft developer and which could have break the internet.
Source : Bleeping Computer, Notepad++
2