Off-topic for aiqbench
This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.
North Korean Hackers Are Hiding Malware Servers Inside Empty Crypto Transfers
North Korean-linked attackers are using a new way to hide the servers that control malware. The method places a command server address inside an empty Ethereum transaction, making the activity look like a normal crypto transfer rather than a malware signal. The technique was found in two malicious npm packages, bianira-ui version 1.27.0 and fluid-type-ui version 2.0.8. Both packages […] The post North Korean Hackers Are Hiding Malware Servers Inside Empty Crypto Transfers appeared first on Cyber Security News.
North Korean-linked attackers are using a new way to hide the servers that control malware. The method places a command server address inside an empty Ethereum transaction, making the activity look like a normal crypto transfer rather than a malware signal. The technique was found in two malicious npm packages, bianira-ui version 1.27.0 and fluid-type-ui version 2.0.8. Both packages impersonated legitimate Tailwind CSS…
Excerpt shown under the publisher's RSS terms · 63 words · full text and figures are on the publisher's site
Related coverage
North Korean Hackers Hide OTTERCOOKIE Malware in SVG Images to Backdoor Developers
Cybersecurity News · Jul 20, 2026
DPRK-Linked Hackers Deploy Ted Backdoor and CurlRAT Against South Korean Firms
Cybersecurity News · Sep 7, 2026
North Korean Hackers Turn Trusted npm Packages Into a Gateway for Supply-Chain Attacks
Cybersecurity News · Jul 30, 2026
Hackers Turned Ethereum Into a Secret Messaging System for Malware
Cybersecurity News · Sep 29, 2026