lazarus.day
Actors
Reports
Incidents
IoCs
Analytics
Actors
Reports
Incidents
IoCs
Support
#EtherHiding
Incident
2025-10-16 •
DPRK Adopts EtherHiding: Nation-State Malware Hiding on Blockchains
Share:
8
Tagged Reports
6
Unique Authors
291
Active Days
Tagged Reports
2026-08-02
Open Source Malware
NullReceiver's Blank Crypto Transfers Solves the Challenges of EtherHiding
#EtherHiding
#ContagiousInterview
#NPM
#NullReceiver
2026-07-29
Allsecure
ClickFix, EtherHiding & a DPRK Wallet Trail
#ClickFix
#EtherHiding
#UNC5342
#ContagiousInterview
2026-06-22
Melted In Hex
Dead Drops on the Blockchain: Reversing a DPRK npm Loader (PolinRider / A6-Shadow-15)
#Lazarus
#PolinRider
#BeaverTail
#InvisibleFerret
#NPM
#EtherHiding
2026-03-25
e Sentire
EtherRAT & SYS_INFO Module: C2 on Ethereum (EtherHiding), Target Selection, CDN-Like Beacons
#ClickFix
#EtherHiding
#EtherRAT
2025-11-13
Ransom ISAC
Cross-Chain TxDataHiding Crypto Heist: A Very Chainful Process (Part 3)
#EtherHiding
#FamousChollima
2025-10-27
Ransom ISAC
Cross-Chain TxDataHiding Crypto Heist: A Very Chainful Process (Part 2)
#DevPopper
#EtherHiding
#T1547
#T1059.006
#T1059.007
#T1005
#T1573
#T1566
#T1041
#T1219
#T1195
#T1027
#T1204.002
#T1555.003
#T1095
#T1567
#T1071.001
#T1140
#T1082
2025-10-20
Ransom ISAC
Cross-Chain TxDataHiding Crypto Heist: A Very Chainful Process (Part 1)
#EtherHiding
2025-10-16
Google
DPRK Adopts EtherHiding: Nation-State Malware Hiding on Blockchains
#EtherHiding
#JADESNOW
#UNC5342
« Back