Aeternum Malware — Analysis, Campaigns & Threat Activity

Related Threat Clusters

• Ghost CMS SQL Injection Exploits 700+ Sites in Ongoing ClickFix Campaign

  A critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS is being actively exploited in a large-scale cyberattack affecting over 700 websites, including those of Harvard University, Oxford University, Auburn…

  17 articles · Updated May 25, 2026
• Aeternum Botnet Utilizes Polygon Blockchain for Command Control

  The Aeternum botnet loader has been identified as using Polygon smart contracts for its command-and-control (C2) operations, moving away from traditional centralized servers. This shift complicates efforts by…

  9 articles · Updated February 26, 2026

Recent Intelligence Reports

• Ghost CMS CVE-2026-26980 Mass Attack Hijacks 700+ Sites for ClickFix Malware Campaigns — Rescana · May 26, 2026
• Aeternum Botnet Loader Employs Polygon Blockchain C&C to Boost Resilience — Feeds.Feedburner · February 27, 2026
• The Hacker — Facebook · February 27, 2026
• New Aeternum C2 Botnet Evades Takedowns via Polygon Blockchain — Hackread · February 26, 2026
• New botnet loader Aeternum uses Polygon smart contracts as its C2 channel. Commands go ... — X · February 26, 2026
• Aeternum Botnet Shifts Command Control to Polygon Blockchain — Infosecurity-Magazine · February 26, 2026

Related Entities