Trojanized npm Packages Employ NullReceiver Tactic to Decode C2 IP from Blockchain

Organization: info@thehackernews.com (The Hacker News)

Location: Global

Source: info@thehackernews.com (The Hacker News)

Cybersecurity researchers have flagged an evolution of the EtherHiding blockchain-based command-and-control (C2) technique that conceals the C2 server IP address inside a made-up destination address of a completely empty Ethereum transfer. The new dead drop resolver approach, observed in two trojanized npm packages “bianira-ui” and “fluid-type-ui,” has been codenamed NullReceiver by


Apply / Read More


WhatsApp
Get Latest Updates: Join our WhatsApp Group

Scroll to Top