Web3
Curated coverage and analysis in this editorial area.
Apex Accelerator: Fake Web3 Audits Deliver npm Malware
A threat group built a sham Web3 accelerator to distribute infostealer malware via malicious npm packages, weaponizing security audits…
Unit 42 Uncovers Blockchain-Based C2: Smart Contracts Become Botnet Backbone
Palo Alto Networks Unit 42 has documented two campaigns — ChainDrop and PolinRider — that use Ethereum and multi-chain TRON, Aptos, an…
From Endpoints to Smart Contracts: How Botnets Are Upgrading C2
Unit 42 documents real-world campaigns using blockchain smart contracts for command-and-control, bypassing traditional detection on op…
Polymarket Loses $3M in Frontend Supply-Chain Attack
On June 25, 2026, Polymarket lost roughly $3 million after a third-party vendor compromise injected malicious JavaScript into its fron…