A recent report from ReversingLabs has uncovered a complex software supply chain attack utilizing Ethereum smart contracts for hiding malicious code.
Details on How Ethereum Smart Contracts Were Abused in Supply Chain Attack
Attackers exploited two malicious NPM packages containing code to fetch instructions from Ethereum smart contracts. These contracts acted as attackers, allowing remote control of compromised systems without revealing their own servers.
Hackers Use GitHub Repositories to Spread Malware
Cybercriminals are reportedly using GitHub to spread malware disguised as useful software. These repositories promise tools for social media automation and crypto wallet management, but instead install hidden scripts that download additional malware and target crypto wallets.
Ethereum's Growth in Q3
Meanwhile, Ethereum has shown significant growth over the past few weeks, hitting multiple high points. Its market cap has crossed the $500 billion mark, signaling positive momentum for investors.
In light of these developments, organizations and developers must closely monitor open-source dependencies and conduct audits to mitigate risks.
