Just came across a threat via email at work that led to a compromised website that used Ethereum to deploy malware. Thankfully our security controls blocked the threat. But just one more reason why Ethereum is garbage.
Found a good write up on the attack chain:
https://labs.guard.io/etherhiding-hiding-web2-malicious-code-in-web3-smart-contracts-65ea78efad16
Tyler Burns
npub1d3…xynp3
2024-06-14 13:16:21
Author Public Key
npub1d30mhvhd0sagmu83wdm26wqk00heptfn05xvgmfx7r9xscstnfcs7xynp3Published at
2024-06-14 13:16:21Event JSON
{
"id": "5f815100843d12c636051d6877c59110c0ac70f1a22ffb60dc51c408fe80e134",
"pubkey": "6c5fbbb2ed7c3a8df0f17376ad38167bef90ad337d0cc46d26f0ca68620b9a71",
"created_at": 1718370981,
"kind": 1,
"tags": [
[
"r",
"https://labs.guard.io/etherhiding-hiding-web2-malicious-code-in-web3-smart-contracts-65ea78efad16"
]
],
"content": "Just came across a threat via email at work that led to a compromised website that used Ethereum to deploy malware. Thankfully our security controls blocked the threat. But just one more reason why Ethereum is garbage.\n\nFound a good write up on the attack chain:\n\nhttps://labs.guard.io/etherhiding-hiding-web2-malicious-code-in-web3-smart-contracts-65ea78efad16",
"sig": "52391f3c51ad4ebe03ead1c5c7c1058f5df22023ef46d688a300ab8683bfb24052327ed553d278c7038304d17f5fd55484ac4cdbdc971636c922bb5a78b8ec1e"
}