ThreatVectr
Tag

#EtherHiding

5 stories taggedEtherHiding.

Photoreal editorial shot of a modern silver laptop on a dark wooden desk, screen showing a generic blurred password prompt box glowing against an otherwise blac
Threat Intelligence

Criminals Hid a Hacking Network Inside a Cryptocurrency Blockchain. Thirty-One Companies Got Caught.

A new campaign turns blockchain technology into an untraceable instruction relay, letting attackers redirect infected computers to a new server for less than a penny per update.

4 min read
Full-frame edge-to-edge photoreal shot of a darkened office monitor displaying a generic fake CAPTCHA verification page reflected in a glass surface, with faint
Threat Intelligence

This Week's Security Grab Bag: AI Hijacks, Fake Fixes, and a Cursor Bug

A roundup week: nothing catastrophic on its own, but the patterns are the story.

4 min read
Photoreal editorial shot of a developer's darkened desk, an open laptop showing rows of green package names in a terminal, one line highlighted in red, faint bl
Threat Intelligence

Malicious npm Packages Hide Attacker Servers Inside Empty Ethereum Transactions

Researchers found two booby-trapped code libraries pulling instructions from fake wallet addresses on the Ethereum blockchain, a twist on the EtherHiding trick now dubbed NullReceiver.

4 min read
Full-frame edge-to-edge photoreal overhead shot of a tangle of consumer networking gear — a stacked home router, an IP camera, and a small Android set-top box —
Threat Intelligence

Fake Claude installer promoted by Bing ads hits 29 organisations with SectopRAT

Attackers hid a phishing page on Anthropic's own domain, then bought Bing ads to send people to a booby-trapped 'Claude Desktop' download.

4 min read
Full-frame photoreal editorial image of a dimly lit university physics laboratory at night, glowing computer monitors showing generic webmail interface reflecti
Threat Intelligence

Microsoft Warns of Two ACR Stealer Campaigns Stealing Credentials Through Fake Fixes

Between late April and mid-June 2026, two separate criminal campaigns used a trick called ClickFix to persuade workers to hand over browser passwords, session tokens, and business documents, with no software flaw required.

3 min read
© 2026 Threat Vectr