North Korea NullReceiver Hides Malware in NPM (opensourcemalware.com)

2 points by 6mile 3mo ago ↗ HN

1 comment

[ 3.2 ms ] story [ 20.6 ms ] thread

DPRK has created a new leaner technique to obfuscate its C2 payloads with NullReceiver. The NPM packages call the Ethereum blockchain directly to find hidden addresses in the destination.