Investigating North Korean hackers utilizing EtherHiding for malware on Ethereum and BNB blockchain

North Korean hackers, linked to the group UNC5342, are using EtherHiding malware to exploit Ethereum and BNB blockchains. This malware allows stealthy transactions via smart contracts, making detection and mitigation challenging.

In 2025, these hackers have reportedly stolen over 2 billion USD, primarily affecting crypto platforms such as Bybit. This represents a significant rise in cyber theft by North Korea, aggravating the ongoing threat landscape in cryptocurrency.