Cribl Uncovers EtherHiding ClickFix Campaign
Cribl discovered a ClickFix campaign using EtherHiding with the Polygon blockchain to hide C2 domains in smart contracts.
Tag: EtherHiding
ThreatsDay: GhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 13 More Stories
This week's ThreatsDay Bulletin covers a wide range of cybersecurity developments, including new attack techniques, data breaches, and product updates. Key highlights…
NullReceiver: New Ethereum-Based C2 Technique Hides IP in Recipient Addresses
Cybersecurity researchers have uncovered a new evolution of the EtherHiding blockchain-based command-and-control (C2) technique, dubbed NullReceiver, which conceals the C2 server IP…
EtherHiding: Blockchain-Based C2 Technique
EtherHiding is a covert technique that embeds malicious code within smart contracts on public blockchains like BNB Smart Chain or Ethereum. It…
DOUBLECUP Loader-as-a-Service Uses ClickFix and Steganographic PNGs to Deliver CountLoader and DeviceManager RAT
A new Russian loader-as-a-service (LaaS) operation named DOUBLECUP is leveraging ClickFix social engineering lures and steganographic PNG images cached in victims' browsers…
DeviceManager: Python-Based RAT Using EtherHiding
DeviceManager is a modular Python-based remote access trojan distributed via DOUBLECUP. It uses EtherHiding to resolve C2 servers via Ethereum/Polygon smart contracts…
DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing Malware
Threat actors with ties to North Korea have been attributed to a sophisticated macOS malvertising campaign that involves redirecting users to fake…
Guardio Labs Documented EtherHiding
Guardio Labs is a cybersecurity company that first publicly documented the EtherHiding technique in October 2023. Their research highlighted how attackers embed…
UAC-0145 Uses ClickFix CAPTCHAs to Infect Ukrainian Devices with Malware
Russian state-sponsored threat actors from the UAC-0145 sub-cluster, linked to Sandworm and GRU, are using fake CAPTCHA checks on compromised websites to…
Ethereum Blockchain Platform
Ethereum is a blockchain platform used in the EtherHiding technique to retrieve domain names from smart contracts for malicious CAPTCHA injection.