Hackers abuse Notepad++ plugins to stealthily install malware