Back Cybersecuritynews

Researchers Uncover Aeternum C2 Infrastructure with Advanced Persistence and Network Evasion Features

Cybersecuritynews •Tushar Subhra Dutta • February 27, 2026

For years, taking down a botnet meant finding its command-and-control (C2) server, seizing the domain, and watching the network go dark. Law enforcement used this method to dismantle major operations like Emotet, TrickBot, and QakBot. A newly discovered botnet loader called Aeternum C2 has been built specifically to close that door, storing all of its […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Aeternum Botnet Utilizes Polygon Blockchain for Command Control The Aeternum botnet loader has been identified as using Polygon smart contracts for its command-and-control (C2) operations, moving away from traditional centralized servers. This shift complicates efforts by authorities and security firms to dismantle the botnet, as it now relies on decentralized infrastructure. The botnet was uncovered by Qrator Research Lab during monitoring of cybercrime forums. 9 sources 46

Extracted Entities

Researchers Uncover Aeternum C2 Infrastructure with Advanced Persistence and Network Evasion Features

The full story

Extracted Entities

Attack Types (1)

Malware (4)

MITRE ATT&CK (1)