Modular Malware Frameworks

Dark Caracal's Ethereum fallback moves C2 recovery off the names defenders can seize

Arctic Wolf links a June 2026 intrusion in Venezuela to a new Go framework whose extended build reads replacement C2 addresses from a smart contract, and says the feature has been used.