"Evolution of Web3 in Cloud Supply Chain Attacks" published by PaloaltoNetworks. #NPM, #AlluringPisces, #EtherHiding, #PolinRider, #NullReceiver https://unit42.paloaltonetworks.com/web3-cloud-supply-chain-attacks

DPRK malware now finds its C2 on the blockchain - one transaction rotates it, no domain to block. https://intel.threadlinqs.com/threat/TL-2026-3023 #ThreatIntel #ChainDrop #PolinRider #NullReceiver

"Their GitHub Repo Was Compromised. The Trail Led to North Korea." published by tarunrd77. #GitHub, #VSCode, #PolinRider, #NullReceiver https://medium.com/@tarunrd77/their-github-repo-was-compromised-the-trail-led-to-north-korea-6d332abbdedf

"XCTDH Adopts Hash Hiding" published by RansomISAC. #OmniStealer, #NullReceiver, #HashHiding https://ransom-isac.org/blog/xctdh-adopts-hash-hiding

"PolinRider is A/B Testing its Way Past Your Detections" published by OpenSourceMalware. #GitHub, #VSCode, #PolinRider, #NullReceiver https://opensourcemalware.com/blog/polinrider-is-a-b-testing-its-way-past-your-detections

"GHAPPIER - One loader, sixty-five repositories, twenty-two accounts: an unreported loader family beside DPRK's PolinRider campaign" published by CloudSEK. #GitHub, #NPM, #PolinRider, #NullReceiver, #GHAPPIER https://www.cloudsek.com/blog/ghappier-malware-loader-npm-supply-chain-attack

"PolinRider Spreads Through Compromised GitHub Accounts and Packagist" published by Socket. #GitHub, #EtherHiding, #VSCode, #PolinRider, #NullReceiver https://socket.dev/blog/polinrider-github-packagist