🚨 New GoCaracal malware can retrieve fallback C2 addresses from Ethereum smart contracts.
Seen in a June intrusion at a Venezuelan communications organization, GoCaracal can read a replacement address from Ethereum after repeated primary C2 failures, then retry normal off-chain communications.
How the fallback works: https://thehackernews.com/2026/08/gocaracal-malware-uses-ethereum-smart.html
7
2August 27, 2026 5.9K 21
