Aeternum Botnet Uses Polygon Blockchain for Decentralized C2

Tue, 11 Aug 2026 11:54:43 +0000

Engineer — Learn: Blockchain-based C2 is an emerging evasion technique that may bypass traditional domain-blocking controls; no patch or configuration action required, but architects should consider that blocking Polygon RPC endpoints could disrupt legitimate Web3 tooling.
SOC/IR — Plan: Build or tune detections for outbound calls to Polygon RPC endpoints (e.g., polygon-rpc.com) from non-Web3 workloads, and develop hunting queries for processes that query smart contract ABI methods as a C2 channel.
Leader — Learn: Blockchain-anchored C2 represents a structural evasion of perimeter controls; useful context for future investments in DNS/network monitoring that can handle decentralized infrastructure, but no immediate leadership action required.

Dysphoria IoT Botnet Adopts Blockchain C2 After JackSkid Takedown

Tue, 28 Jul 2026 13:01:43 +0000

Engineer — Learn: Blockchain-based C2 and peer-relay architecture represent an evasion technique relevant to defenders running IoT-adjacent infrastructure, but there are no specific CVEs, affected products, or actionable mitigations named here.
SOC/IR — Plan: The shift to blockchain name services and victim-device relays changes the detection model for this botnet family; build or tune detections for anomalous outbound connections to blockchain resolvers and unexpected device-to-device relay traffic in your estate.
Leader — Learn: Useful context on botnet resilience trends following law-enforcement disruptions, but no immediate vendor exposure or board-level risk event is indicated here.