Trojanized npm Packages Employ NullReceiver Tactic to Decode C2 IP from Blockchain

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-08-05 13:41 UTC
Importiert: 2026-08-11 12:08 UTC
Quelle-ID: thn_global
uid_hash: 77e690d60aca971eb69a4a3c6a8cce0edd73947a34f6b91816640057d54d04c6

The Hacker News

Inhalt

Cybersecurity researchers have flagged an evolution of the EtherHiding blockchain-based command-and-control (C2) technique that conceals the C2 server IP address inside a made-up destination address of a completely empty Ethereum transfer.

The new dead drop resolver approach, observed in two trojanized npm packages "bianira-ui" and "fluid-type-ui," has been codenamed NullReceiver by

No data

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
The Hacker News	thn_global	security_news		-	de	https://feeds.feedburner.com/TheHackersNews

Zurueck zur Eintrags-Liste