The WeedHack Epidemic: YouTube Hijacking to RAT Pipeline, A MaaS That's Cheaper Than Your Netflix (Pt1)
Introduction Putting aside the edgy name, WeedHack has been a prevalent multi-staged .jar Malware-as-Service (MaaS) campaign in the last few months, and it has no signs of slowing - quite the opposite. This campaign is especially interesting due to the combination of modern techniques that we are seeing actors implement. From SEO Poisoning to YouTube channel hijacking, to the use of Discord as C2 as well as the use of EtherHiding - using the Ethereum network to store configuration and C2 details through smart contracts. ...