cognitive cybersecurity intelligence

News and Analysis

Search

Trojanized npm Packages Decode C2 IP From Ethereum Recipient Addresses

Trojanized npm Packages Decode C2 IP From Ethereum Recipient Addresses


Cybersecurity researchers have flagged an evolution of the EtherHiding blockchain-based command-and-control (C2) technique that conceals the C2 server IP address inside a made-up destination address of a completely empty Ethereum transfer.

The new dead drop resolver approach, observed in two trojanized npm package “bianira-ui” and “fluid-type-ui,” has been codenamed NullReceiver by

Source: thehackernews.com –

Subscribe to newsletter

Subscribe to HEAL Security Dispatch for the latest healthcare cybersecurity news and analysis.

More Posts