Infostealer on Melted in Hex https://meltedinhex.com/tags/infostealer/ Recent content in Infostealer on Melted in Hex Melted in Hex https://meltedinhex.com/images/og-social.png https://meltedinhex.com/images/og-social.png Hugo en-us Thu, 16 Jul 2026 20:00:00 +0530 Hiding in Plain Ledger: Four Months of a ClickFix Operator's Blockchain C2 https://meltedinhex.com/posts/clickfix-errtraffic-blockchain-c2/ Thu, 16 Jul 2026 20:00:00 +0530 https://meltedinhex.com/posts/clickfix-errtraffic-blockchain-c2/ <p>To hide its command-and-control server, this operation writes the address onto a public blockchain. That makes the C2 impossible to seize or sinkhole — but it also means every time the operator moves servers, they leave a permanent, timestamped entry in a ledger anyone can read. I pulled that ledger. It runs to <strong>four months and roughly 127 delivery hosts from a single smart contract</strong>, and it was still updating the day I looked.</p>