Ethereum Name Service (ENS): Decentralized Naming System
ENS is a blockchain-based name service used by Dysphoria for C2 resolution. The botnet uses ENS domains like m3rnbvs5d[.]eth and burrberry[.]eth to…
Tag: blockchain
Solana Name Service (SNS): Decentralized Naming on Solana
SNS is a blockchain-based name service on Solana used by Dysphoria for C2 resolution, with domains like 24carnforth2merseyside[.]sol supplying infrastructure records.
Ethereum Blockchain Platform
Ethereum is a blockchain platform used in the EtherHiding technique to retrieve domain names from smart contracts for malicious CAPTCHA injection.
Injective Labs: Blockchain and Cryptocurrency Development
Injective Labs is a blockchain development company focused on decentralized finance (DeFi) and cryptocurrency solutions. Their SDK was compromised in a supply…
Attackers Exploit ‘Ill Bloom’ Vulnerability to Drain $3.1 Million From Cryptocurrency Wallets
Security firm Coinspect has disclosed a crypto wallet flaw called 'Ill Bloom' that is being actively exploited by attackers. The vulnerability stems…
U.S. Government Entity Paid Kairos $1 Million in Data-Theft Extortion Case
A U.S. government entity paid approximately $1 million to prevent the leak of stolen files, according to a case study by Rakesh…
TronGrid Used as Dead Drop Resolver in Malware Campaign
The malware uses TronGrid, a blockchain infrastructure, as a dead drop resolver to fetch next-stage JavaScript payloads, making takedown efforts difficult.
Aptos Blockchain Used as Fallback Dead Drop Resolver in Malware Campaign
Aptos is used as a fallback mechanism for the dead drop resolver to fetch next-stage JavaScript payloads, enhancing resilience against takedown.
Europol Dismantles AudiA6 Crypto Laundering Service Used by Ransomware Gangs
Europol, in coordination with international law enforcement, has disrupted AudiA6, a cryptocurrency laundering service that facilitated the washing of over €336 million…
DEV#POPPER RAT: Remote Access Trojan in PolinRider Campaign
A remote access trojan delivered as a second-stage payload in the PolinRider campaign. Unpacked from encrypted payloads fetched via blockchain services like…