EtherHiding Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
3
occurrences
First Seen
November 7, 2025
Last Seen
April 1, 2026

EtherHiding is a malware family tracked across 3 threat clusters and 3 intelligence report mentions on ThreatCluster. First observed November 7, 2025; most recent activity April 1, 2026.

Overview

EtherHiding is a malware family cited in Google's warning about AI-powered threats targeting cryptocurrency users. The report frames EtherHiding as part of a growing class of AI-enhanced malware aimed at compromising crypto assets and related user accounts, highlighting its significance to the crypto-security landscape.

Related Threat Clusters

  • EtherRAT Malware Campaign Exploits Ethereum for Stealthy Attacks

    Hackers are leveraging the Ethereum blockchain to deploy a sophisticated Node.js backdoor known as EtherRAT, utilizing a technique called EtherHiding to obscure their command-and-control (C2) infrastructure. This…

    2 articles · Updated April 1, 2026
  • Russian Access Broker Sentenced for $9M Ransomware Facilitation

    Aleksei Volkov, a 26-year-old Russian citizen, was sentenced to 81 months in prison for his role as an initial access broker (IAB) facilitating ransomware attacks against U.S. companies, including the Yanluowang group.…

    21 articles · Updated March 24, 2026
  • Debate on AI SOC Agents and Security Outcomes

    The discussion around AI Security Operations Centers (SOCs) is evolving, with Gartner's report highlighting the mainstream recognition of AI's potential in enhancing SOC functions. However, critiques emphasize that…

    52 articles · Updated November 16, 2025

Recent Intelligence Reports

  • Hackers Use EtherRAT and EtherHiding to Hide Malware Infrastructure on Ethereum — Cybersecuritynews · April 1, 2026
  • Russian Hacker Jailed for 81 Months Over $9M Ransomware Attacks — Decrypt.Co · March 24, 2026
  • Google warns of AI-powered malware targeting crypto users — Invezz · November 7, 2025

CVSS v3.1 Breakdown