In different phrases, there is no such thing as a single tackle, IP, or server to dam. That mentioned, there are downsides to the method that aren’t talked about by Checkmarx, together with the truth that blockchain communication is gradual, in addition to public. The blockchains can’t be edited, or blocked simply, however they are often tracked as soon as their use as a part of malware C2 has been uncovered.
Regardless of previous predictions that the method would take off, that is most likely why utilizing blockchains for C2 stays the experimental protect of specialist malware.
Package deal confusion
Maybe the extra important a part of the story is that the method is getting used to focus on testing instruments distributed by way of NPM, the biggest open supply JavaScript registry. Focusing on testing instruments is one other approach to get contained in the privileged developer testing environments, and any deeper entry to the CI/CD pipelines that they reveal.
