Learn how EtherHiding works and how The Gentlemen, DeadLock, and Cry0 use blockchain infrastructure to update malware server addresses, maintain victim communications, and support ransom negotiations and data extortion.
EtherHiding: How Ransomware Groups Use the Blockchain to Resist Takedowns
About this summary. This is a short, independently written summary of an article first published by BlackFog. Cyber Security News did not report or verify the underlying story. Read the original: https://www.blackfog.com/etherhiding-how-ransomware-groups-use-blockchain/
Source attribution: headline and facts are from BlackFog (blackfog.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
🏴☠️ Vexy ransomware has just published a new victim : Summit Electric Supply
Summit Electric Supply supplies electrical products and solutions for commercial, industrial, construction, OEM, institutional, and marine applications. Its website…
H1 2026 Healthcare Data Breach Report
There has been a 5.9% decline in healthcare breaches compared to H1 2025. Between January 1 and June 30, 2026, 397 data breaches affecting 500 or more individuals were…
Hackers steal protective order and foster care records from Arizona courts
“Arizona’s court system was targeted by a cyber attack from criminal hackers or their bots.” This is how the Arizona Supreme Court announced that hackers had attacked…
Higher education is under siege, and fragmented security is making it harder to respond
Higher education faces a difficult security equation. Universities hold large volumes of sensitive student, financial, health, and research data while supporting open…
BlackFog Launches ADX Vision 2.0 to Secure the Next Generation of Enterprise AI
BlackFog Q2 2026 Ransomware Report: Undisclosed Ransomware Attacks Surge 40% Year on Year
South Africa Seeks Help After Cyberattack Targets Air Traffic Control
As aviation infrastructure suffers more cyberattacks, air traffic systems are the latest target, with a ransomware toolkit installed on at least one operational network.