Blockchain malware jumps 440% as AI aids state hackers
Attackers are storing malicious code directly on immutable blockchains to keep operations alive through domain takedowns.
Advertising disclosure: we may earn a commission when you join an operator via links on this page, at no cost to you. This never dictates our ratings. How we make money
Key takeaways
- Blockchain-based malware activity surged 440% as AI tools lower technical hurdles.
- State-linked hackers from North Korea and Iran use public chains to keep malware alive.
- Immutability allows malicious instructions to survive standard domain takedowns.
- Security defenses are shifting toward tracking wallets, contracts, and off-chain servers.
Public blockchains are becoming a safe haven for persistent malware, fueling a 440% jump in malicious activity hosted directly on-chain.
Artificial intelligence is lowering the technical bar for state-sponsored hacking crews, particularly teams tied to North Korea and Iran. They're dropping control instructions straight onto public ledgers, turning blockchain's core feature—immutability—against defenders. When security teams or law enforcement take down traditional web domains, it doesn't stop the attack. The malware simply keeps pulling its orders directly off the chain.
A shift in cyber defense
That level of persistence forces a complete redesign of defensive strategy. Standard domain blocks fail completely when source instructions reside on a decentralized network. Instead, defense teams are refocusing their work on tracking target crypto wallets, scrutinizing smart contracts, and isolating connected off-chain servers.
Why it matters
On-chain malware gives regulators a fresh excuse to clamp down on decentralized tech. If you hold or trade crypto, prepare for steeper compliance hurdles and potential security delays while protocols rush to monitor suspicious smart contract interactions before attackers strike.
Source: CryptoSlate
Top Crypto Casinos Right Now
🇬🇧 Showing sites that accept players from United Kingdom Change country
Advertising disclosure: we may earn a commission when you join an operator via links on this page, at no cost to you. This never dictates our ratings. How we make money
More info Less info
Why we chose it: A US-oriented casino that turns away only New Jersey. The cashier takes crypto, but the site publishes fewer specifics than any operator we list.
- KYC
- Required
Restricted countries: New Jersey (US).
More info Less info
Why we chose it: The LatAm door of the BetNow platform: Spanish-first, a 200% welcome at 20x rollover, and a weekly 2% rebate. Crypto rails unconfirmed — check before depositing.
- KYC
- Required
Restricted countries: Australia, Costa Rica, Central African Republic, Congo - Brazzaville, Eritrea, France, Guinea-Bissau, Iraq and 15 more.
Daniel Okoro
Daniel tracks crypto regulation and policy across the US, EU and Asia, with a decade in financial journalism.
Related News
Hackers Mint Trillions in Fake BTC as Bridge Exploit Leaves LPs Unpaid
Scammers Duped Revolut into Handing Over Passports and Bitcoin Records
Revolut Handed Customer Bitcoin Data to Fake Law Enforcement
