MUST READ

ChainScript: the RAT that hides its command server inside a blockchain contract

 | 

A BYD Shark 6 Hack Shows the Risks of Connected Cars

 | 

The Target Is No Longer the Model. It’s the Agent.

 | 

UK Police Data Faces Long-Standing Microsoft Cloud Security Concerns

 | 

U.S. CISA adds Linux Kernel flaws to its Known Exploited Vulnerabilities catalog

 | 

AI Hallucinations Nearly Triggered a US-China Military Confrontation

 | 

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 115

 | 

Security Affairs newsletter Round 595 by Pierluigi Paganini – INTERNATIONAL EDITION

 | 

Google Gemini also Broke Out of Its Test Environment

 | 

AI Helps Hackers Hijack OpenAI Staff Accounts Through a Forum

 | 

Brevo Supply-Chain Attack Infected Over 100,000 Websites

 | 

Gyazo Data Breach Exposes 23 Million User Records

 | 

RatHat Turns Android Accessibility Into an Attack Weapon

 | 

Check Point Fixes Critical CVE-2026-91843 Allowing Root Code Execution

 | 

OpenAI admits its models lie to cover their own mistakes

 | 

Cyberattacks on Oil Tankers Put Maritime Critical Infrastructure at Risk

 | 

SilkParasite Infrastructure Links SpiceRAT to Central Asian Targets

 | 

NightmareStresser Goes Offline in Global DDoS-for-Hire Crackdown

 | 

U.S. CISA adds Acronis Backup, Cisco ISE, and Google Pixel flaws to its Known Exploited Vulnerabilities catalog

 | 

Chosen Brick, Iran's Surveillance Malware

 | 

ChainScript

Pierluigi Paganini September 21, 2026
ChainScript: the RAT that hides its command server inside a blockchain contract

Blackpoint uncovers ChainScript, a Node.js RAT that queries a Polygon smart contract to find and rotate its command server. Blackpoint’s Adversary Pursuit Group was chasing a ClickFix campaign spreading an unknown RAT namend ChainScript. The malicious code is a previously undocumented Node.js remote access trojan that hides its command server on a public blockchain. The […]

newsletter

Subscribe to my email list and stay
up-to-date!

recent articles

ChainScript: the RAT that hides its command server inside a blockchain contract

Malware / September 21, 2026

A BYD Shark 6 Hack Shows the Risks of Connected Cars

Hacking / September 21, 2026

The Target Is No Longer the Model. It’s the Agent.

Artificial Intelligence / September 21, 2026

UK Police Data Faces Long-Standing Microsoft Cloud Security Concerns

Uncategorized / September 21, 2026

U.S. CISA adds Linux Kernel flaws to its Known Exploited Vulnerabilities catalog

Security / September 20, 2026