North Korea NullReceiver Hides Malware in NPM

Posted by 6mile on Monday August 03, 2026 @07:55AM
from the opensourcemalware.com dept.

https://opensourcemalware.com/blog/nullreceiver-dprk-c2-technique

( 1 comment | 2 points | on HN )

Re:North Korea NullReceiver Hides Malware in NPM by 6mile on Monday August 03, 2026 @07:55AM (#49154572)

DPRK has created a new leaner technique to obfuscate its C2 payloads with NullReceiver. The NPM packages call the Ethereum blockchain directly to find hidden addresses in the destination.

[ Parent | on HN ]