DPRK malware reads its C2 address from Ethereum transfers - blocking the IP is not enough. https://intel.threadlinqs.com/threat/TL-2026-2782 #ThreatIntel #DEVPOPPERjs #OmniStealer #XCTDH

DPRK malware reads its C2 address from Ethereum transfers - blocking the IP is not enough. https://intel.threadlinqs.com/threat/TL-2026-2782 #ThreatIntel #DEVPOPPERjs #OmniStealer #XCTDH