Hackers Use Negative Hotel Reviews to Spread Malware That Hides C2 on Blockchain
Cofense says hotel staff are phished with fake complaints that deliver EtherRAT and TONResolver using blockchain C2.
62
Malware
NetSupport Manager
- Mentions · 7d0
- Mentions · 30d1
- All mentions2
- First seenSep 10, 2026
- Last mentioned22d ago
Timeline
2 articles · newest firstWe've got one word for it, and it's usually the wrong one
Cisco Talos's Threat Source newsletter critiques 'burnout' terminology, describing four occupational injuries, and flags a UAT-10820 WebDAV stealer campaign at a Ukrainian government organization.
32
Appears with
- Cisco Talosorganization · 1
- Cofenseorganization · 1
- Ukrainian government organizationvictim · 1
- Cisco Talosvendor · 1
- TONResolvermalware · 1
- EtherRATmalware · 1
- Amatera stealermalware · 1
- ZigCryptoStealerproduct · 1
- Microsoft Defenderproduct · 1
- Ethereumproduct · 1
- ZigCryptoStealermalware · 1
- Booking.comorganization · 1
- Microsoftvendor · 1
- NetSupport Managerproduct · 1
- ServiceNowvendor · 1
- TONproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.