September 30, 2026
- XCTDH (DPRK-attributed) has moved its C2 addressing onto Ethereum, steganographically encoding destination addresses in transaction fields — resilient against takedown and hard to block without breaking legitimate chain traffic (Ransom-ISAC). · Threat Activity
in Mandiant Names the NetScaler Post-Exploitation Kit as Patch Rates Stay Under 10%