State-Linked Hackers Increase Onchain Malware Activity by 420%
- State-linked hackers accounted for approximately two-thirds of new blockchain activity each quarter.
- The number of times malware instructions were stored on public blockchains rose by 420% over the past year.
- Chainalysis connected activities on Tron, Aptos, and BNB Smart Chain to a North Korea-linked group, UNC5342.
- Malicious blockchain writes increased by 440% since July due to advanced AI tools capable of generating malicious code.
- Iran-linked actors were found encoding command-and-control data onto the Bitcoin blockchain for malware operations.
The rise in state-sponsored hacking activities highlights a concerning trend where public blockchains are exploited for storing malware instructions, enhancing the persistence of cyber threats. This shift allows attackers to maintain access even after traditional infrastructure is dismantled.
As state actors increasingly utilize public blockchains for malicious purposes, the recorded surge of 420% in onchain malware activity underscores the evolving landscape of cybersecurity threats. (Source)
