North Korea NullReceiver Hides Malware in NPM (opensourcemalware.com)

DPRK has created a new leaner technique to obfuscate its C2 payloads with NullReceiver. The NPM packages call the Ethereum blockchain directly to find hidden addresses in the destination.