Related Threat Clusters
-
Dysphoria Botnet Infects 200,000 Devices Using Blockchain for C2 Operations
The Dysphoria botnet has compromised approximately 200,000 devices globally, utilizing a sophisticated command-and-control (C2) infrastructure hidden behind Ethereum and Solana blockchain domains. Originating from the…
5 articles · Updated July 28, 2026 -
Kimwolf Botnet v7 Enhances DDoS Tactics Using Chrome Fingerprints and Ethereum
The Kimwolf botnet, primarily composed of hijacked Android TV boxes, has been upgraded to version 7, which employs advanced techniques to disguise DDoS attack traffic as legitimate web browsing. Discovered by Palo Alto…
4 articles · Updated August 12, 2026 -
Kelp DAO Exploit: $293 Million Drain Triggers DeFi Contagion
On April 18, 2026, Kelp DAO's LayerZero-powered cross-chain bridge was exploited, resulting in the theft of 116,500 rsETH, valued at approximately $293 million. The attacker utilized a forged cross-chain message to…
187 articles · Updated April 18, 2026 -
Shai Hulud npm Worm Compromises Over 26,000 Repositories
The Shai Hulud worm has compromised more than 26,000 public repositories in a supply chain attack. The attack targeted various npm packages, exploiting vulnerabilities that allowed unauthorized access to these…
32 articles · Updated November 24, 2025 -
EasyDNS Suffers Social Engineering Attack, Briefly Hijacking eth.limo Domain
On April 17, 2026, the Ethereum Name Service gateway eth.limo was briefly hijacked due to a social engineering attack against its domain registrar, EasyDNS. An attacker impersonated a team member to initiate an account…
6 articles · Updated April 20, 2026 -
Shai-Hulud Malware Infects npm Packages, Compromising Thousands of Repositories
A new wave of the Shai-Hulud malware has compromised nearly 500 npm packages, affecting over 26,000 GitHub repositories. This self-replicating worm, which targets developers' credentials and secrets, has been linked to…
43 articles · Updated November 29, 2025
Recent Intelligence Reports
- Kimwolf botnet rebuilt to survive takedowns, researchers say — Cyberscoop · August 12, 2026
- Rebuilt in Six Days: Dysphoria IoT Botnet Hides on Blockchain to Defy Seizure — Techtimes · July 29, 2026
- EasyDNS admits responsibility for the hijacking incident of eth.limo, marking its first ... — Chaincatcher · April 20, 2026
- Kelp DAO Hack Traced to Lazarus Group: Report — Mexc · April 20, 2026
- Friday's eth.limo Hijack Caused by Social Engineering on EasyDNS — Cointelegraph · April 20, 2026
- EasyDNS accepts responsibility for eth.limo hijack, its first social engineering breach in 28 years — Theblock.Co · April 19, 2026
- Shai Hulud malware attack compromises 19,000 GitHub repositories — Securitybrief · November 28, 2025
- Shai Hulud malware hits NPM as crypto libraries face a growing security crisis — Bitget · November 24, 2025