Skip to content
August 2026 Page 43

August 2026

Trojanized npm Packages Employ NullReceiver Tactic to Decode C2 IP from Blockchain

Trojanized npm Packages Employ NullReceiver Tactic to Decode C2 IP from Blockchain

Ravie LakshmananAug 05, 2026Cyber Espionage / Threat Intelligence Cybersecurity researchers have flagged an evolution of the EtherHiding blockchain-based command-and-control (C2) technique that conceals the C2 server IP address inside a made-up destination address of a… 

Kali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Risk

Kali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Risk

Kali365 is turning a legitimate Microsoft login into a gateway to corporate data. The phishing kit targets US organizations with attacker-controlled device codes that victims approve on Microsoft’s real authentication page. Once access and refresh…