State hackers drive 420% surge in onchain malware,: Malware

North Korea-linked hackers used Tron, Aptos and BNB Chain to maintain malware infrastructure, while suspected Iran-linked actors embedded directions in Bitcoin transactions.

Evidence boundary

Confidence describes the coverage of the available evidence. It is not a safety rating and does not guarantee that a protocol or asset is safe.

Sources

• https://cointelegraph.com/news/onchain-malware-writes-surge-420-north-korea-iran-chainalysis

Record history

First seen: 2026-09-17T12:00:00.000Z. Last updated: 2026-09-17T15:17:07.714Z. Revision: 1.