EtherHiding Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
4
occurrences
First Seen
November 7, 2025
Last Seen
August 8, 2026

EtherHiding is a malware family cited in Google's warning about AI-powered threats targeting cryptocurrency users.

Overview

EtherHiding is a malware family cited in Google's warning about AI-powered threats targeting cryptocurrency users. The report frames EtherHiding as part of a growing class of AI-enhanced malware aimed at compromising crypto assets and related user accounts, highlighting its significance to the crypto-security landscape.

Related Threat Clusters

  • Cybercriminals Exploit BNB Chain for Malware via Fake CAPTCHAs

    Microsoft Threat Intelligence has reported a new malware campaign utilizing the BNB Smart Chain, employing a technique called EtherHiding. This method allows hackers to store malicious code within blockchain smart…

    12 articles · Updated August 7, 2026
  • EtherRAT Malware Campaign Exploits Ethereum for Stealthy Attacks

    Hackers are leveraging the Ethereum blockchain to deploy a sophisticated Node.js backdoor known as EtherRAT, utilizing a technique called EtherHiding to obscure their command-and-control (C2) infrastructure. This…

    2 articles · Updated April 1, 2026
  • Russian Access Broker Sentenced for $9M Ransomware Facilitation

    Aleksei Volkov, a 26-year-old Russian citizen, was sentenced to 81 months in prison for his role as an initial access broker (IAB) facilitating ransomware attacks against U.S. companies, including the Yanluowang group.…

    21 articles · Updated March 24, 2026
  • Debate on AI SOC Agents and Security Outcomes

    The discussion around AI Security Operations Centers (SOCs) is evolving, with Gartner's report highlighting the mainstream recognition of AI's potential in enhancing SOC functions. However, critiques emphasize that…

    52 articles · Updated November 16, 2025

Recent Intelligence Reports

  • EtherHiding — metamask.io · August 8, 2026
  • Hackers Use EtherRAT and EtherHiding to Hide Malware Infrastructure on Ethereum — Cybersecuritynews · April 1, 2026
  • Russian Hacker Jailed for 81 Months Over $9M Ransomware Attacks — Decrypt.Co · March 24, 2026
  • Google warns of AI-powered malware targeting crypto users — Invezz · November 7, 2025

CVSS v3.1 Breakdown