logo

Aeternum Botnet Shifts Command Control to Polygon Blockchain

ID: e8ad255d-e3ce-5b76-b26f-87a2a1551387

STIX ID: report--e8ad255d-e3ce-5b76-b26f-87a2a1551387

Feed Name: Infosecurity Magazine (News)

Threat Score
75/100

Date Published: 2026-02-26

Date Updated: 2026-04-22

...
...

Qrator Research Lab uncovered Aeternum, a commercially offered C++ botnet loader that moves C2 to Polygon blockchain smart contracts: operators submit commands on-chain via a web panel and infected hosts poll RPC endpoints for immutable instructions. This model removes central servers and domains from the disruption equation, lowers operational cost, and enables rapid distribution of diverse payloads (information stealers, clippers, RATs, miners), significantly complicating takedown efforts and shifting defensive emphasis to traffic filtering and edge mitigation.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.