North Korean hackers have adopted a sophisticated method known as 'EtherHiding' to discreetly host and disseminate malware via the blockchain, utilizing smart contracts as a conduit. This approach facilitates social engineering attacks with the ultimate goal of pilfering cryptocurrencies. Google's Threat Intelligence Group has disclosed that, starting from February 2025, the North Korean state-sponsored cyberattack group, internally designated as 'UNC5342,' has incorporated this technology into their 'Contagious Interview' campaign. This marks the inaugural instance of a state-backed hacker collective employing such a tactic.
