The Financial world is a major target for malicious activities, and among them is hacking. As blockchain technology gains recognition and as its potential is being realized, new emerging risks are on the rise, and the latest one is EtherHiding. This is a newly developed way for hackers to attack blockchain networks and conduct malicious activities.&nbsp;
EtherHiding is a sophisticated technique used by hackers to conceal malicious codes inside a blockchain network. One example of such a malicious act was in the Binance Smart Chain network, where the cybercriminals discovered a way of spreading malware. Unaware customers have been targeted, and cybersecurity excerpts have unmasked the cybercrime and warned on the matter.
<h2 class="wp-block-heading" id="hackers-using-etherhiding-to-spread-malware">Hackers using EtherHiding to spread malware</h2>
Cybercriminals involved in hacking have discovered a novel method of hiding malicious code in Binance Smart contracts. These hackers have found a way to manipulate Bianace Smart Chain (BSC) smart contracts and use them to hide malicious codes. They lure their victims through this hidden malware and attack unsuspecting customers.&nbsp;
The targets are duped into updating their browsers with fake prompts. This has also been confirmed by cybersecurity experts and researchers. According to a cybersecurity researcher in Guardio Labs, the report on 15th October explains more about the attack. They found out that hackers involve compromising WordPress websites and install malicious code that recoups partial payloads from smart contracts on the blockchain. This code is hidden in the BNB Smart Chain <a href="https://x.com/TheHackersNews/status/1713786356378333332?s=20" rel="noopener noreferrer nofollow" target="_blank">smart contracts</a>. As such, they serve as anonymous free hosting platforms where their victims are lured.&nbsp;
<figure class="wp-block-image"><img decoding="async" src="https://lh5.googleusercontent.com/fY_s4cX5SgAYmPkAb6R0f1jq-U_6KbRPI0Pe_La4NmIAY3u0oxtap1HnWl8rZYsQLlfIIIfMc9oXSn5b3nVnBo4Tn6iK_03g6b-1GYRhEHLpqD62pLTG9CMhTwxmR2tAs0mSQhJNm_W5Y_QBudsqyi8" alt="">
</figure>
Source: The Hacker News
Furthermore, the threat actors can update the code at will and change their mode of attack. The most recently unmasked strategy they employ is the fake browser update. Victims were tricked into clicking on fake landing pages, prompted by fake browser update notifications. The links are embedded with the malicious code that retrieves partial payloads.
<h2 class="wp-block-heading" id="how-hackers-use-etherhiding">How hackers use EtherHiding</h2>
EtherHiding is a technique that allows cyber attackers to spread malicious code across multiple nodes in a blockchain network. This is different from traditional malware attacks that rely on centralized servers. It makes EtherHiding extremely hard to detect and remove. Basically, this is due to the fact that once the code is infused into the blockchain network, it becomes part of the immutable ledger.&nbsp;
The payload includes a <a href="https://www.cryptopolitan.com/cybercriminals-javascript-friendtech-users/" rel="noopener noreferrer nofollow">JavaScript </a>code that retrieves additional code from the hacker’s domains. Eventually, the full site is saturated with fake browser update notifications that spread the malware. The approach is indeed sophisticated as it allows the attackers to swap out malicious code to one another at will. This allows them to modify their attack strategies and makes it a challenge to try to solve.&nbsp;
The hackers employ strategies like steganography that hides information inside digital files. It can be through the update notifications. Another way is through obfuscation, and this is when a code is intentionally modified to make it difficult to analyze.&nbsp;
Nati Tal, the lead of cybersecurity at <a href="https://x.com/GuardioSecurity/status/1713526638581837835?s=20" rel="noopener noreferrer nofollow" target="_blank">Guardio Labs</a>, and her partner researcher Ogeg Zaytsev confirm that the EtherHiding malicious attacks can be a challenge to mitigate. When the smart contracts are infected, the cybercriminals operate anonymously, and this makes it hard to flag the hackers. B
SC can only rely on its network<a href="https://www.cryptopolitan.com/cfpb-are-crypto-platforms-safe-from-hacks/" rel="noopener noreferrer nofollow"> community </a>to flag these malicious attacks. It is clear that EtherHiding presents a major security threat that diminishes the integrity of blockchain networks. Guardo Labs advised:
<blockquote class="wp-block-quote">
 &nbsp;WordPress sites are so vulnerable and frequently compromised, as they serve as primary gateways for these threats to reach a vast pool of victims. Adaptive defenses are needed to counter these emerging threats. <cite>Guardo Labs</cite>
</blockquote>
Considering that 43% of all websites are run using WordPress, Guardio suggests website owners be extra vigilant with their security strategies. Following the growth and development of blockchain and <a href="https://labs.guard.io/etherhiding-hiding-web2-malicious-code-in-web3-smart-contracts-65ea78efad16" rel="noopener noreferrer nofollow" target="_blank">Web3</a>, malicious campaigns are on the rise and should not be left unchecked.&nbsp;

EtherHiding: A novel way for hackers to hide malicious code in blockchains

Table of Contents

Cryptopolitan_News

Other articles published on Oct 16, 2023

Check out Onyx, An Innovative and user-friendly DeFi Protocol

Bitcoin Price Prediction as Analyst Says US Recession Can Be Avoided – Can BTC Reach $100,000?

Bitcoin Price Spikes Following Fake BlackRock ETF Announcement: $100 Million Liquidated

Empowering Web3 Accessibility: Trust Wallet's New Brand Identity

Arkham’s ARKM token rises 3% despite speculations that the firm is dumping via Wintermute

Crypto Fear and Greed Index / Decrypting market sentiments

Join our free newsletter for daily crypto updates!