Blockchain-Assisted Cyberattacks Soar Fivefold Amid State Actor and Russian Group Involvement

Blockchain-assisted cyberattacks have surged fivefold since last year, according to Chainalysis, a blockchain data and intelligence platform. The increase is largely attributed to North Korean and Iranian nation-state actors, as well as Russian-speaking criminal groups.

The technique behind these attacks, known as Blockchain Dead Drops (BDD), stores malicious payloads on public, censorship-immune blockchains. This allows infected devices to retrieve the payloads on demand, making it a particularly resilient form of cyberattack.

What makes BDD so challenging is that blockchain data is public, immutable, and replicated worldwide. As a result, takedowns become incredibly difficult, as threat actors can use this infrastructure for command and control without worrying about losing access to domain seizures, repository removals, hosting takedowns, and other disruptions.