blockchain-c2 3
- No File, No Fixed C2: Inside NetCon, a WMI Backdoor That Reads Its Command Server Off the Blockchain
- Reading the ledger: how one Polygon smart contract exposed three ClickFix crews and 153 confirmed hacked websites
- Five layers deep for a stealer: reversing the "PuppetKing" ClickFix chain that ended in StealC