Netskope Threat Labs

EtherHide

ATP Sandbox Adv. HeuristicsAV

EtherHide is malware that uses the Ethereum blockchain to hide command and control communication.

First seen
April 2025
Last seen
October 2026
Alert Name
Document-HTML.Trojan.EtherHide
GT:JS.EtherHide.3.0003BEB1
GT:JS.EtherHide.3.00154817
GT:JS.EtherHide.3.0040B41C
GT:JS.EtherHide.3.00451E5F
GT:JS.EtherHide.3.0045E8D4
GT:JS.EtherHide.3.0060183F
GT:JS.EtherHide.3.00629C3C
GT:JS.EtherHide.3.00757553
GT:JS.EtherHide.3.0099660B