Hasamba

@hasamba72.bsky.social

5 months ago

DPRK actor UNC5342 stores JavaScript payloads in smart contracts (Ethereum, BNB Smart Chain); loader retrieves via eth_call and delivers JADESNOW / INVISIBLEFERRET, enabling crypto theft and resilient C2. #EtherHiding #UNC5342 #JADESNOW https://bit.ly/4qlCSfY

lazarusholic

@lazarusholic.bsky.social

5 months ago

"DPRK Adopts EtherHiding: Nation-State Malware Hiding on Blockchains" published by Google. #EtherHiding, #JADESNOW, #UNC5342, #DPRK, #CTI cloud.google.com/blog/topics/threat-intel...