Ethereum Blockchain — Cyber Threats, Attacks & Incidents

Threat entity extracted from intelligence sources

Frequency
3
occurrences
First Seen
November 21, 2025
Last Seen
January 30, 2026

Ethereum Blockchain is a technology platform tracked across 3 threat clusters and 3 intelligence report mentions on ThreatCluster. First observed November 21, 2025; most recent activity January 30, 2026.

Overview

Ethereum blockchain is a decentralized, programmable platform that enables smart contracts and decentralized applications (dApps). Its programmable nature introduces cybersecurity considerations, including smart contract vulnerabilities, on-chain asset risks, and the potential for threat actors to leverage blockchain ecosystems for command-and-control, monetization, or obfuscation. The referenced article discusses a nascent Tsundere botnet, illustrating how researchers are examining emerging threats that intersect with blockchain-enabled infrastructure.

Related Threat Clusters

  • Emergence of Tsundere Botnet Targeting Windows Users

    The Tsundere botnet, discovered by Kaspersky in July 2025, targets Windows systems through a fake MSI installer masquerading as game setup files. It has been detected in multiple countries including Mexico, Chile,…

    2 articles · Updated November 21, 2025
  • Malicious npm Packages Use Adspect Cloaking in Crypto Scam

    A malware campaign has been identified that utilizes malicious npm packages to create fake websites designed to identify and exploit potential victims. The threat actor, known as 'dino_reborn', published these packages…

    13 articles · Updated November 18, 2025
  • TA584 Cybercriminal Group Intensifies Email Attacks in 2025

    Proofpoint reported a significant increase in activity from the cybercriminal group TA584 in 2025. The group is linked to initial access brokering and follow-on attacks, including ransomware and data theft, utilizing…

    2 articles · Updated January 30, 2026

Recent Intelligence Reports

  • Proofpoint details TA584's fast-evolving 2025 attacks — Securitybrief.Au · January 30, 2026
  • Proofpoint details TA584's fast-evolving 2025 attacks — Itbrief · January 30, 2026
  • Nascent Tsundere botnet examined — Scworld · November 21, 2025

CVSS v3.1 Breakdown