Aeternum Botnet Uses Polygon Smart Contracts for Takedown

Cybersecuritynews •Tushar Subhra Dutta • August 14, 2026

Aeternum is a new botnet loader designed to resist takedowns. It stores instructions on Polygon, a public blockchain, creating a widely replicated control channel that is difficult to remove. The malware reaches Windows systems through several routes. Investigators found a packed loader, an XWorm and XMRig package, and Python code in a fake DBeaver installer. […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Aeternum Botnet Leverages Polygon Smart Contracts for Resilience The Aeternum botnet has emerged as a sophisticated loader that utilizes Polygon's blockchain to store its operational instructions, making it challenging to dismantle. This malware targets Windows systems via multiple vectors, including a fake DBeaver installer containing a packed loader, XWorm, and XMRig. The botnet's design aims to resist takedown efforts, complicating mitigation strategies for cybersecurity professionals. Investigators are currently analyzing its spread and impact, but specific numbers regarding infections or affected organizations have not been disclosed. The botnet's use of decentralized technology marks a significant evolution in malware tactics, raising alarms in the cybersecurity community. 2 sources 67

Extracted Entities

Aeternum Botnet Uses Polygon Smart Contracts for Takedown

The full story

Extracted Entities

Attack Types (1)

Malware (2)

MITRE ATT&CK (2)

Platforms (2)