CryptoThe Hacker Newsabout 3 hours ago
NullReceiver Hides C2 IP in Ethereum Addresses
1 min read
NullReceiver, a new blockchain C2 technique, encodes C2 IP addresses in Ethereum recipient addresses. Two trojanized npm packages, bianira-ui and fluid-type-ui, use it, linked to North Korea. The packages are removed from npm after a few hundred downloads since July 28, 2026.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
