#ParsedReport #CompletenessLow
03-09-2026

Malware on the Blockchain: An Ongoing Campaign’s New WebRTC Twist

https://www.netskope.com/blog/malware-on-the-blockchain-an-ongoing-campaigns-new-webrtc-twist

Report completeness: Low

Threats:
Webrtc_technique
Clickfix_technique
Dead_drop_technique

Victims:
Small businesses, Healthcare, Plumbing, Electronic commerce

Industry:
E-commerce, Financial

ChatGPT TTPs:
do not use without manual check
T1027, T1036, T1059.001, T1059.007, T1095, T1105, T1189, T1204, T1573, T1584.004, have more...

IOCs:
IP: 1
Coin: 6
Domain: 4
Url: 4

Soft:
ebRTC Tw, WebRTC, WordPress

Wallets:
mainnet

Functions:
JSON-RPC, Function

Languages:
javascript, powershell

Links:
https://github.com/netskopeoss/NetskopeThreatLabsIOCs/tree/main/Malware/Amatera%20ClickFix