North Korea uses blockchains as indelible malware hosts
North Korean threat actor UNC5342 uses EtherHiding—smart contracts on public blockchains—to host and deliver malware (JADESNOW loader and INVISIBLEFERRET backdoor) via fake job lures.
North Korean Hackers Use EtherHiding to Hide Malware Inside Blockchain Smart Contracts
North Korea-linked UNC5342 uses EtherHiding to embed malicious code in public smart contracts to steal data and siphon cryptocurrency while remaining resilient and pseudonymous.
