Cyber Scotland Connect is thrilled to announce our next event in Central Edinburgh at [CodeBase Edinburgh,](https://maps.app.goo.gl/3Fk8TNPhqXYdSLkc9) supported by [RiverSa

NullReceiver lets two North Korea-linked npm packages decode a C2 IP from blank Ethereum transfers without smart contracts or transaction calldata.

Haz clic para acceder al contenido completo.

Cybersecurity researchers have flagged an evolution of the EtherHiding blockchain-based command-and-control (C2) technique that conceals the C2 server IP address inside a made-up destination address of a completely empty Ethereum transfer. The new dead drop resolver approach, observed in two trojanized npm package "bianira-ui" and "fluid-type-ui," has been codenamed NullReceiver by

Introduction: When a Blockchain Becomes a Hidden Cyber Weapon Cybersecurity defenders have spent years learning how to identify malicious command-and-control infrastructure. Suspicious domains, hard-coded IP addresses, unusual network connections, and attacker-controlled servers have traditionally provided valuable clues during malware investigations. But threat actors are constantly searching for ways to remove those clues—or hide them in places defenders are less likely to inspect.