PNNL

Abstract

In today's evolving threat landscape, attackers are continuously developing innovative methods for delivering established malware. While Vidar, an information stealer active since 2018, typically relies on various traditional delivery mechanisms, analysis revealed an intriguing novel deployment method. By combining ClickFix social engineering with the emerging EtherHiding technique it can be delivered onto systems. In this presentation, I will provide an examination of this methodology, demonstrates practical approaches for decompiling and analyzing the embedded smart contract code, and reveals methods for auditing attacker activities within blockchain infrastructure.