EtherHiding Exposed: Inside a Blockchain-powered Malware Campaign Hiding in Plain Sight

Reported 18 Sep 2026 by otx · Severity: medium

A sophisticated malware campaign active since November 2025 exploits blockchain technology to maintain persistent command-and-control infrastructure. Attackers store C2 addresses in Polygon blockchain smart contracts rather than hardcoding them, enabling rapid infrastructure rota