Void Botnet Leverages Ethereum for Resilient C2

Gbhackers •Mayura Kathir • May 20, 2026

A newly identified botnet, named Void, is leveraging Ethereum smart contracts to build a resilient, hard-to-disrupt command-and-control (C2) infrastructure, marking a continued evolution in blockchain-enabled cybercrime. Discovered in March 2026 and advertised on a Russian-language cybercrime forum, Void Botnet follows closely behind the earlier Aeternum C2 campaign documented by Qrator Labs, but introduces notable differences […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Void Botnet Exploits Ethereum for Command-and-Control Operations The Void Botnet, discovered in March 2026, utilizes Ethereum smart contracts to create a resilient command-and-control (C2) infrastructure that is difficult to disrupt. This botnet has emerged on Russian-language cybercrime forums, showcasing an evolution in cybercrime tactics. Unlike traditional C2 setups that can be easily seized by authorities, Void's architecture allows it to operate beyond conventional takedown efforts. The botnet's operations raise significant concerns for cybersecurity professionals as it represents a shift towards decentralized control mechanisms. Current reports indicate that Void follows the Aeternum C2 campaign but introduces unique operational methods. The full scope of its impact is still being assessed as security researchers continue to analyze its capabilities. 2 sources 67

Extracted Entities

Void Botnet Leverages Ethereum for Resilient C2

The full story

Extracted Entities

Attack Types (1)

Campaigns (1)

Companies (1)

Malware (1)

MITRE ATT&CK (1)