A7A5

Iran-linked malware takes its orders from a Bitcoin address once tied to Satoshi

Chainalysis logged a 420% rise in onchain malware writes for its 2026 crime report, and says suspected Iranian operators ran their update channel through a permanent public Bitcoin address nobody can take offline.