North Korean hackers found hiding crypto-stealing malware with Blockchain

North Korean flag with a hooded hacker.

• UNC5342 uses blockchain smart contracts to deliver crypto-stealing malware via EtherHiding
• Fake jobs and coding challenges lure developers into triggering the JadeSnow loader and backdoor
• Blockchain’s immutability makes malware hosting resilient

North Korean state-sponsored threat actors are now using public blockchains to host malicious code and deploy malware on target endpoints.