North Korean Hackers Use EtherHiding to Hide Malware Inside Blockchain Smart Contracts

A North Korea-linked threat group, identified as UNC5342 by Google Threat Intelligence Group, has employed the EtherHiding technique for the first time to distribute malware and facilitate cryptocurrency theft. This development signifies a notable escalation in state-sponsored cyber operations, as EtherHidingoriginally designed to obfuscate Ethereum transactionsis now being exploited for malicious purposes by a nation-state actor.