Supply Chain Compromise Leads to Trojanized Installers for Notezilla, RecentX, Copywhiz

The following Rapid7 analysts contributed to this research: Leo Gutierrez, Tyler McGraw, Sarah Lee, and Thomas Elkins.

Executive Summary

On Tuesday, June 18th, 2024, Rapid7 initiated an investigation into suspicious activity in a customer environment. Our investigation identified that the suspicious behavior was emanating from the installation of Notezilla, a

analysts behavior compromise contributed customer detection and response environment executive installation investigation june lee leo managed detection and response (mdr) mcgraw rapid7 research supply supply chain supply chain compromise suspicious behavior thomas trojanized installers tuesday tyler