# North Korea Deploys Malware Concealed on Public Blockchains ▴ News

**Published:** 2025-10-16
**Categories:** News

---

The deployment of malware payloads via public blockchain smart contracts by a nation-state marks a significant evolution in attack vector architecture. This technique, designated EtherHiding, transforms immutable public ledgers into a resilient and effectively permanent malware hosting infrastructure. By embedding malicious code within smart contracts on networks like Ethereum and the BNB Smart Chain, the actor UNC5342 achieves a state of next-generation bulletproof hosting where traditional takedown efforts are rendered inert.

The systemic implication is the weaponization of decentralization itself, turning a core attribute of blockchain architecture into a robust command-and-control mechanism. The immediate consequence is an elevated threat level for digital asset and technology sector participants, as the attack framework is resistant to conventional interdiction and remediation protocols.

The operational use of public blockchains for malware persistence by state-level actors introduces a new, resilient threat vector that co-opts the core principle of immutability, creating a challenge for established cybersecurity takedown and defense paradigms.

- 
**Technique Name** ▴ EtherHiding, the method of embedding malicious code inside smart contracts.

- 
**Primary Actor** ▴ UNC5342, a hacking group linked to North Korea.

- 
**Strategic Consequence** ▴ Traditional malware takedown efforts are ineffective against payloads stored on decentralized, immutable blockchains.

Signal Acquired from ▴ <a href="https://therecord.media/north-korean-hackers-using-blockchain-hiding-malware?utm_source=options.greeks.live&utm_medium=referral&utm_campaign=satellite" target="_blank" rel="nofollow">therecord.media</a>

**Tags:** [Bulletproof Hosting](https://options.greeks.live/area/bulletproof-hosting/), [State-Sponsored Actor](https://options.greeks.live/area/state-sponsored-actor/), [Payload Delivery](https://options.greeks.live/area/payload-delivery/), [Malicious Code](https://options.greeks.live/area/malicious-code/), [Persistent Backdoor](https://options.greeks.live/area/persistent-backdoor/), [Smart Contracts](https://options.greeks.live/area/smart-contracts/)	

## Discover More

- 
### [What Are the Core Differences between Crypto Options and Traditional Options Market Microstructure?](https://options.greeks.live/question/what-are-the-core-differences-between-crypto-options-and-traditional-options-market-microstructure/)
![A deconstructed spherical object, segmented into distinct horizontal layers, slightly offset, symbolizing the granular components of an institutional digital asset derivatives platform. Each layer represents a liquidity pool or RFQ protocol, showcasing modular execution pathways and dynamic price discovery within a Prime RFQ architecture for high-fidelity execution and systemic risk mitigation.](https://options.greeks.live/wp-content/uploads/2025/08/modular-institutional-digital-asset-derivatives-execution-framework-dissected-for-optimal-rfq-performance.jpg)

Digital options diverge from traditional through fragmented 24/7 liquidity, smart contract execution, and unique volatility risk profiles.

- 
### [How Can Blockchain Technology Enhance Collateral Management Efficiency in OTC Crypto Options?](https://options.greeks.live/question/how-can-blockchain-technology-enhance-collateral-management-efficiency-in-otc-crypto-options/)
![Glowing teal conduit symbolizes high-fidelity execution pathways and real-time market microstructure data flow for digital asset derivatives. Smooth grey spheres represent aggregated liquidity pools and robust counterparty risk management within a Prime RFQ, enabling optimal price discovery.](https://options.greeks.live/wp-content/uploads/2025/07/institutional-digital-asset-derivatives-rfq-protocol-market-microstructure-prime-os.jpg)

Blockchain enhances collateral management by automating the entire lifecycle via smart contracts, enabling real-time settlement and reducing counterparty risk.

- 
### [How Do Distributed Ledger Technologies Enhance Block Trade Settlement Efficiency?](https://options.greeks.live/question/how-do-distributed-ledger-technologies-enhance-block-trade-settlement-efficiency/)
![A sleek, multi-component mechanism features a light upper segment meeting a darker, textured lower part. A diagonal bar pivots on a circular sensor, signifying High-Fidelity Execution and Price Discovery via RFQ Protocols for Digital Asset Derivatives. This Market Microstructure detail highlights Atomic Settlement capabilities and Capital Efficiency within a Principal's Operational Framework.](https://options.greeks.live/wp-content/uploads/2025/07/precision-engineered-institutional-digital-asset-derivatives-rfq-execution-microstructure-for-optimal-price-discovery-and-atomic-settlement-with-prime-os-integration.jpg)

DLTs enhance block trade settlement efficiency through atomic DvP, reducing risk and unlocking capital velocity.

- 
### [What Are the Primary Regulatory Challenges for DLT Adoption in Block Trade Reporting?](https://options.greeks.live/question/what-are-the-primary-regulatory-challenges-for-dlt-adoption-in-block-trade-reporting/)
![Sleek teal and dark surfaces precisely join, highlighting a circular mechanism. This symbolizes Institutional Trading platforms achieving Precision Execution for Digital Asset Derivatives via RFQ protocols, ensuring Atomic Settlement and Liquidity Aggregation within complex Market Microstructure.](https://options.greeks.live/wp-content/uploads/2025/07/institutional-digital-asset-derivatives-rfq-protocol-execution-microstructure-interoperability-prime-os-best-execution-layer.jpg)

Leveraging DLT for block trade reporting demands navigating legal ambiguities, ensuring data privacy, and achieving interoperability within existing regulatory constructs.

- 
### [The Professional’s Guide to Early-Stage Crypto Venture Investing](https://options.greeks.live/guide/the-professionals-guide-to-early-stage-crypto-venture-investing/)
![A metallic, disc-centric interface, likely a Crypto Derivatives OS, signifies high-fidelity execution for institutional-grade digital asset derivatives. Its grid implies algorithmic trading and price discovery. This embodies a Principal's operational framework optimizing RFQ protocols and market microstructure.](https://options.greeks.live/wp-content/uploads/2025/07/rfq-block-price-algo-fidelity-alpha-capital-institutional-digital.jpg)

Unlock superior alpha in early-stage crypto ventures with a disciplined, professional investment framework.

- 
### [How Do Distributed Ledger Technologies Enhance Block Trade Immutability?](https://options.greeks.live/question/how-do-distributed-ledger-technologies-enhance-block-trade-immutability/)
![Sleek, off-white cylindrical module with a dark blue recessed oval interface. This represents a Principal's Prime RFQ gateway for institutional digital asset derivatives, facilitating private quotation protocol for block trade execution, ensuring high-fidelity price discovery and capital efficiency through low-latency liquidity aggregation.](https://options.greeks.live/wp-content/uploads/2025/07/prime-os-rfq-portal-optimal-institutional-digital-asset-execution.jpg)

DLTs secure block trade records with cryptographic hashes and distributed consensus, ensuring verifiable, tamper-proof transactional finality.

- 
### [How Do Distributed Ledgers Enhance the Auditability of Block Trade Submissions?](https://options.greeks.live/question/how-do-distributed-ledgers-enhance-the-auditability-of-block-trade-submissions/)
![A sleek, multi-component device in dark blue and beige, symbolizing an advanced institutional digital asset derivatives platform. The central sphere denotes a robust liquidity pool for aggregated inquiry. An angled module represents a precise RFQ protocol interface, ensuring high-fidelity execution, best execution, and optimal capital efficiency within the Prime RFQ.](https://options.greeks.live/wp-content/uploads/2025/08/institutional-digital-asset-derivatives-rfq-execution-platform-system.jpg)

DLTs fortify block trade auditability by creating immutable, cryptographically verified, and distributed records, ensuring unparalleled transparency and trust.

- 
### [What Are the Operational Differences between Centralized and Decentralized Block Trade Reporting?](https://options.greeks.live/question/what-are-the-operational-differences-between-centralized-and-decentralized-block-trade-reporting/)
![A gleaming, translucent sphere with intricate internal mechanisms, flanked by precision metallic probes, symbolizes a sophisticated Principal's RFQ engine. This represents the atomic settlement of multi-leg spread strategies, enabling high-fidelity execution and robust price discovery within institutional digital asset derivatives markets, minimizing latency and slippage for optimal alpha generation and capital efficiency.](https://options.greeks.live/wp-content/uploads/2025/07/inst-digital-asset-deriv-rfq-os-for-optimal-high-fidelity-trade-exec.jpg)

Centralized reporting funnels data through a single entity, while decentralized systems distribute validation across a network, impacting liquidity and risk.

- 
### [What Are the Primary Technological Requirements for Integrating DLT Block Trade Protocols with Existing OMS/EMS?](https://options.greeks.live/question/what-are-the-primary-technological-requirements-for-integrating-dlt-block-trade-protocols-with-existing-oms-ems/)
![A diagonal metallic framework supports two dark circular elements with blue rims, connected by a central oval interface. This represents an institutional-grade RFQ protocol for digital asset derivatives, facilitating block trade execution, high-fidelity execution, dark liquidity, and atomic settlement on a Prime RFQ.](https://options.greeks.live/wp-content/uploads/2025/07/optimized-institutional-digital-asset-derivatives-trading-system-rfq-protocols-and-atomic-settlement.jpg)

Integrating DLT block trade protocols with OMS/EMS requires robust interoperability, smart contract automation, and secure data synchronization for superior execution.

---

## Raw Schema Data

```json
{
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
        {
            "@type": "ListItem",
            "position": 1,
            "name": "Home",
            "item": "https://options.greeks.live"
        },
        {
            "@type": "ListItem",
            "position": 2,
            "name": "News",
            "item": "https://options.greeks.live/news/"
        },
        {
            "@type": "ListItem",
            "position": 3,
            "name": "North Korea Deploys Malware Concealed on Public Blockchains",
            "item": "https://options.greeks.live/news/north-korea-deploys-malware-concealed-on-public-blockchains/"
        }
    ]
}
```

```json
{
    "@context": "https://schema.org",
    "@type": "Organization",
    "@id": "https://greeks.live/#organization",
    "name": "Greeks.Live",
    "url": "https://greeks.live/",
    "description": "Greeks.live is the definitive toolkit for the professional options trader, dedicated to empowering our users with institutional-grade data, advanced analytics, and a comprehensive suite of trading tools designed to provide a decisive edge in the market. Every article and guide published under the Greeks.live name is a product of our deep commitment to data-driven analysis and our mission to support the global trading community.",
    "email": "support@greeks.live",
    "logo": {
        "@type": "ImageObject",
        "url": "https://options.greeks.live/wp-content/uploads/2025/07/Greeks.Live-Logo-Icon.svg"
    },
    "hasPart": [
        {
            "@type": "WebSite",
            "name": "About Us",
            "url": "https://about.greeks.live"
        },
        {
            "@type": "WebSite",
            "name": "App Download Page",
            "url": "https://about.greeks.live/#/download/basic_trade"
        },
        {
            "@type": "WebSite",
            "name": "Newcomers' Guide",
            "url": "https://twisty-sign-c8b.notion.site/Guide-for-Greeks-live-X-Deribit-Newbies-5a08a3052822427d800af6eaf3704c8d"
        },
        {
            "@type": "WebSite",
            "name": "Knowledge Base",
            "url": "https://linktr.ee/greeks.live"
        },
        {
            "@type": "WebSite",
            "name": "Option Terminology",
            "url": "https://greekslive.notion.site/88dfc00e7c584d4d8969b6302a79a12f?pvs=4"
        },
        {
            "@type": "WebSite",
            "name": "Terms of Service",
            "url": "https://greeks.live/#/tos"
        },
        {
            "@type": "WebSite",
            "name": "Disclaimer",
            "url": "https://greeks.live/#/disclaimer"
        }
    ],
    "sameAs": [
        "https://x.com/greekslive",
        "https://youtube.com/@greeks_live?si=-KjT0Lkw4WUCI0tD",
        "https://t.me/greekslive_notifications",
        "https://t.me/greekslive",
        "https://pinterest.com/greekslive/"
    ],
    "makesOffer": [
        {
            "@type": "Offer",
            "itemOffered": {
                "@type": "Service",
                "name": "RFQ Platform",
                "url": "https://rfq.greeks.live",
                "description": "Execute institutional-grade block trades for crypto options and futures. This platform provides deep, over-the-counter (OTC) liquidity via a professional Request for Quote system.",
                "provider": {
                    "@id": "https://greeks.live/#organization"
                }
            }
        },
        {
            "@type": "Offer",
            "itemOffered": {
                "@type": "Service",
                "name": "Lending Tools",
                "url": "https://lend.greeks.live",
                "description": "Manage crypto lending and borrowing activities to earn yield or secure loans. This suite of tools helps users analyze interest rates and manage collateralized debt positions.",
                "provider": {
                    "@id": "https://greeks.live/#organization"
                }
            }
        },
        {
            "@type": "Offer",
            "itemOffered": {
                "@type": "Service",
                "name": "Data Lab",
                "url": "https://greeks.live/#/deribit/tools/datalab/BTC",
                "description": "Analyze historical and real-time options data with advanced metrics. This tool is designed for backtesting strategies and identifying market trends through comprehensive data visualization.",
                "provider": {
                    "@id": "https://greeks.live/#organization"
                }
            }
        },
        {
            "@type": "Offer",
            "itemOffered": {
                "@type": "Service",
                "name": "Profit & Loss Analysis (PnL)",
                "url": "https://greeks.live/#/deribit/tools/pnl_analysis",
                "description": "Track and analyze the Profit and Loss (PnL) of your options portfolio. This tool provides detailed performance metrics to help traders evaluate and refine their strategies.",
                "provider": {
                    "@id": "https://greeks.live/#organization"
                }
            }
        },
        {
            "@type": "Offer",
            "itemOffered": {
                "@type": "Service",
                "name": "Position Visualization",
                "url": "https://greeks.live/#/deribit/tools/pv/BTC",
                "description": "Visualize complex options positions and their corresponding risk profiles. This tool generates payoff diagrams to help traders intuitively understand potential profit, loss, and exposure.",
                "provider": {
                    "@id": "https://greeks.live/#organization"
                }
            }
        },
        {
            "@type": "Offer",
            "itemOffered": {
                "@type": "Service",
                "name": "Options Calculator",
                "url": "https://greeks.live/#/deribit/tools/calculator",
                "description": "Calculate the theoretical price and risk parameters ('the Greeks') of crypto options. An essential tool for pricing new trades and analyzing the sensitivity of existing positions.",
                "provider": {
                    "@id": "https://greeks.live/#organization"
                }
            }
        },
        {
            "@type": "Offer",
            "itemOffered": {
                "@type": "Service",
                "name": "Greeks.live Main Platform",
                "url": "https://greeks.live/",
                "description": "The central hub for the Greeks.live suite of professional cryptocurrency options and derivatives trading tools. Access analytics, manage positions, and explore the ecosystem.",
                "provider": {
                    "@id": "https://greeks.live/#organization"
                }
            }
        },
        {
            "@type": "Offer",
            "itemOffered": {
                "@type": "Service",
                "name": "Community Forum",
                "url": "https://t.greeks.live",
                "description": "Join the official Greeks.live community. Connect with other traders, share insights, and receive the latest updates directly from the team.",
                "provider": {
                    "@id": "https://greeks.live/#organization"
                }
            }
        },
        {
            "@type": "Offer",
            "itemOffered": {
                "@type": "Service",
                "name": "Greeks.live for Deribit",
                "url": "http://deribit.greeks.live",
                "description": "A dedicated interface for trading on the Deribit exchange. This platform leverages Greeks.live's advanced analytics and tools specifically for users of Deribit's options and futures markets.",
                "provider": {
                    "@id": "https://greeks.live/#organization"
                }
            }
        },
        {
            "@type": "Offer",
            "itemOffered": {
                "@type": "Service",
                "name": "Greeks.live for OKX",
                "url": "http://okx.greeks.live",
                "description": "A dedicated interface for trading on the OKX exchange. This platform integrates Greeks.live's powerful analytics with the OKX marketplace, focusing on its options and derivatives products.",
                "provider": {
                    "@id": "https://greeks.live/#organization"
                }
            }
        },
        {
            "@type": "Offer",
            "itemOffered": {
                "@type": "Service",
                "name": "GLVS.AI Trading Platform",
                "url": "https://www.glvs.ai/",
                "description": "An AI-powered platform for automated crypto options trading. Leverage advanced algorithms and data-driven signals to develop and deploy sophisticated, hands-free trading strategies.",
                "provider": {
                    "@id": "https://greeks.live/#organization"
                }
            }
        },
        {
            "@type": "Offer",
            "itemOffered": {
                "@type": "Service",
                "name": "API Testnet & Sandbox",
                "url": "https://test.greeks.live",
                "description": "A dedicated testnet environment for developers to test their API integrations and automated trading strategies. This sandbox allows for full functionality testing without risking real funds.",
                "provider": {
                    "@id": "https://greeks.live/#organization"
                }
            }
        }
    ],
    "subOrganization": [
        {
            "@type": "Organization",
            "name": "GreeksLive HK Co., Limited",
            "email": "support@greeks.live",
            "telephone": "+852-56418949",
            "address": {
                "@type": "PostalAddress",
                "streetAddress": "Unit 11, 27/F, K. Wah Centre, 191 Java Road",
                "addressLocality": "Hong Kong",
                "addressRegion": "North Point",
                "addressCountry": "CN",
                "postalCode": "0000"
            },
            "geo": {
                "@type": "GeoCoordinates",
                "latitude": "22.2932357",
                "longitude": "114.2022026"
            },
            "image": "https://options.greeks.live/wp-content/uploads/2025/08/Wah-Centre-Hong-Kong.jpg"
        }
    ]
}
```

```json
{
    "@context": "https://schema.org",
    "@type": "Article",
    "mainEntityOfPage": {
        "@type": "WebPage",
        "@id": "https://options.greeks.live/news/north-korea-deploys-malware-concealed-on-public-blockchains/"
    },
    "headline": "North Korea Deploys Malware Concealed on Public Blockchains \u25b4 News",
    "description": "State-sponsored actors now leverage immutable ledgers for persistent, decentralized malware distribution, escalating systemic risk. \u25b4 News",
    "url": "https://options.greeks.live/news/north-korea-deploys-malware-concealed-on-public-blockchains/",
    "datePublished": "2025-10-16T22:27:08+00:00",
    "dateModified": "2025-10-16T22:27:12+00:00",
    "articleSection": [
        "News"
    ],
    "author": {
        "@id": "https://greeks.live/#organization"
    },
    "publisher": {
        "@id": "https://greeks.live/#organization"
    },
    "image": {
        "@type": "ImageObject",
        "url": "https://options.greeks.live/wp-content/uploads/2025/07/institutional-digital-asset-derivatives-rfq-protocol-multi-leg-execution-algorithmic-pricing-global-liquidity-principal-trading-systemic-integration-high-fidelity-execution.jpg",
        "caption": "The abstract composition of intersecting blue and beige angular structures against a textured grey sphere visualizes the intricate architecture of institutional-grade RFQ protocols. This represents sophisticated multi-leg options strategies and high-fidelity algorithmic execution for digital asset derivatives. It highlights principal liquidity management, optimized market microstructure, and atomic settlement within a secure trading environment, demonstrating a robust intelligence layer for systemic risk management and superior capital efficiency in digital asset prime brokerage."
    },
    "keywords": [
        "Bulletproof Hosting",
        "Decentralized Networks",
        "Immutable Ledgers",
        "Malicious Code",
        "Payload Delivery",
        "Persistent Backdoor",
        "Smart Contracts",
        "State-Sponsored Actor"
    ]
}
```

```json
{
    "@context": "https://schema.org",
    "@type": "WebSite",
    "url": "https://options.greeks.live/",
    "potentialAction": {
        "@type": "SearchAction",
        "target": "https://options.greeks.live/?s=search_term_string",
        "query-input": "required name=search_term_string"
    }
}
```


---

**Original URL:** https://options.greeks.live/news/north-korea-deploys-malware-concealed-on-public-blockchains/
