BOTCHAIN, the first fully functional Botnet built upon the Bitcoin ProtocolSecurity Affairs·Oct 26, 07:23 UTC · Oct 26, 2018Malware42
North Korean hackers seen using blockchain to hide cryptoThe Record·Oct 16, 17:02 UTC · Oct 16, 2025Malware42
Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RATThe Hacker News·Jul 29, 03:39 UTC · Jul 29, 2026Malware42
Hackers Leverage Blockchain to Hit Japan's Hotels Through Booking.comInfosecurity Magazine·Jun 30, 10:30 UTC · Jun 30, 2026Malware42
North Korean Hackers Use EtherHiding to Hide Malware Inside Blockchain Smart ContractsThe Hacker News·Oct 17, 04:33 UTC · Oct 17, 2025Malware42
The Tsundere botnet uses the Ethereum blockchain to infect its targetsKaspersky Securelist·Nov 21, 08:21 UTC · Nov 21, 2025Malware42
Nation-state hackers deliver malware from “bulletproof” blockchainsArs Technica · Security·Oct 15, 00:00 UTC · Oct 15, 2025Malware42
Lazarus targets blockchain engineers with new KandyKorn macOS MalwareSecurity Affairs·Nov 5, 12:14 UTC · Nov 5, 2023Malware42
A Cryptomining botnet abuses Bitcoin blockchain transactions as C2 backup mechanismSecurity Affairs·Feb 24, 20:52 UTC · Feb 24, 2021MalwareCVE-2015-1427CVE-2019-908247
Fake Chrome Extension “Safery” Steals Ethereum Wallet Seed Phrases Using Sui BlockchainThe Hacker News·Nov 17, 14:27 UTC · Nov 17, 2025Malware42
North Korean Hackers Use EtherHiding to Steal CryptoInfosecurity Magazine·Oct 17, 14:14 UTC · Oct 17, 2025Malware42
Trojanized npm Packages Employ NullReceiver Tactic to Decode C2 IP from BlockchainThe Hacker News·Aug 6, 10:08 UTC · Aug 6, 2026Malware42
Two Compromised joyfill npm Packages Run RAT When Imported Into Node.jsThe Hacker News·Aug 4, 05:21 UTC · Aug 4, 2026Malware142
Rogue PyPI Library Solana Users, Steals Blockchain Wallet KeysThe Hacker News·Aug 11, 10:01 UTC · Aug 11, 2024Malware42
Konni Hackers Deploy AI-Generated PowerShell Backdoor Against Blockchain DevelopersThe Hacker News·Jan 26, 08:54 UTC · Jan 26, 2026Malware42
Dig this: The future of crypto-mining botnetsHelp Net Security·May 3, 00:00 UTC · May 3, 2018Malware42
DePaul professor Lamont Black on why Trump’s cryptocurrency reserve idea isn’t just crazy talkThe Record·Nov 29, 12:07 UTC · Nov 29, 2024Malware42
Malware Campaign Uses Ethereum Smart Contracts to Control npm Typosquat PackagesThe Hacker News·Nov 5, 05:35 UTC · Nov 5, 2024Malware42
Glupteba Botnet Continues to Thrive Despite Google's Attempts to Disrupt ItThe Hacker News·Dec 19, 13:09 UTC · Dec 19, 2022Malware42
Google won a lawsuit against the Glupteba botnet operatorsSecurity Affairs·Nov 21, 14:33 UTC · Nov 21, 2022Malware42
How cybersecurity firms took down Glassworm botnet in one shotSecurity Affairs·May 27, 11:35 UTC · May 27, 2026Malware42
Researchers Expose GhostCall and GhostHire: BlueNoroff's New Malware ChainsThe Hacker News·Oct 30, 09:40 UTC · Oct 30, 2025Malware142
$30M worth of cryptocurrency stolen from Axie Infinity recoveredSecurity Affairs·Sep 9, 16:09 UTC · Sep 9, 2022Malware42
Phorpiex botnet is back, in 2021 it $500K worth of crypto assetsSecurity Affairs·Dec 17, 11:47 UTC · Dec 17, 2021Malware42
Doki, an undetectable Linux backdoor targets Docker ServersSecurity Affairs·Jul 29, 12:21 UTC · Jul 29, 2020Malware142
North Korea targeting Indian crypto job applicants with malwareThe Record·Jul 16, 00:00 UTC · Jul 16, 2026Malware42
Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python InfostealerThe Hacker News·Jul 1, 10:25 UTC · Jul 1, 2026Malware142
GlassWorm Malware Takedown Disrupts Developer Supply Chain Attack InfrastructureThe Hacker News·May 27, 15:23 UTC · May 27, 2026Malware42
CrowdStrike, Google Take Down Glassworm BotnetInfosecurity Magazine·May 27, 14:00 UTC · May 27, 2026Malware42
North Korea–linked KONNI uses AI to build stealthy malware toolingSecurity Affairs·Jan 26, 10:47 UTC · Jan 26, 2026Malware42
GlassWorm Returns with 24 Malicious Extensions Impersonating Popular Developer ToolsThe Hacker News·Dec 3, 06:36 UTC · Dec 3, 2025Malware42
Self-Spreading 'GlassWorm' Infects VS Code Extensions in Widespread Supply Chain AttackThe Hacker News·Oct 24, 07:00 UTC · Oct 24, 2025Malware42
Intel and AMD trusted enclaves, a foundation for network security, fall to physical attacksArs Technica · Security·Sep 30, 20:25 UTC · Sep 30, 2025Malware42
ScarCruft Uses RokRAT Malware in Operation HanKook Phantom Targeting South Korean AcademicsThe Hacker News·Sep 25, 12:56 UTC · Sep 25, 2025Malware42
Malicious npm Packages Exploit Ethereum Smart ContractsInfosecurity Magazine·Sep 3, 15:45 UTC · Sep 3, 2025Malware42
Supply Chain Attack Uses Smart Contracts for C2 OpsInfosecurity Magazine·Nov 4, 12:00 UTC · Nov 4, 2024Malware42
New NKAbuse malware abuses NKN decentralized P2P protocolSecurity Affairs·Dec 16, 00:43 UTC · Dec 16, 2023MalwareCVE-2017-563847
North Korean Hackers Targeting Crypto Experts with KANDYKORN macOS MalwareThe Hacker News·Nov 1, 14:38 UTC · Nov 1, 2023Malware42
Rust-based Realst Infostealer Targeting Apple macOS Users' Cryptocurrency WalletsThe Hacker News·Jul 27, 06:34 UTC · Jul 27, 2023Malware42