Cybersecurity · 53 views
Trojanized npm Packages Decode C2 IP From Ethereum Recipient Addresses
Cybersecurity researchers have flagged an evolution of the EtherHiding blockchain-based command-and-control (C2) technique that conceals the C2 server IP address inside a made-up destination address of a completely empty Ethereum transfer.
Cybersecurity 
Story intelligence
Coverage Single outlet Single-outlet story
Views 53 Community interest
Brief read Under 1 min brief 21 words
Summary
NullReceiver lets two North Korea-linked npm packages decode a C2 IP from blank Ethereum transfers without smart contracts or transaction calldata.
AI summaries can be wrong sometimes—always verify important details using the source article.
How AI & Automation are usedCoverage Context
Part of C2 coverage 37 tracked stories
More from Cybersecurity
Continue reading recent Cybersecurity coverage
- Binance heist is stark example of AI governance gaps and basic security failuresContinue reading
- US Government Email Systems Open to Abuse Thanks to TyposContinue reading
- Fake OpenAI, SpaceX events used to steal Microsoft, Google accountsContinue reading
- What We Missed: Knicks Phishing Test Goes Out of BoundsContinue reading
Support HappeningNow
Independent AI-powered news analysis is reader-supported. Your contribution helps cover infrastructure, summaries, and continued platform development.
Support HappeningNow