Chainalysis reports 440% rise in blockchain-based cyberattack infrastructure
Blockchain data platform Chainalysis found that attacks using 'Blockchain Dead Drops' — a technique storing malware payloads or command-and-control configuration data on public blockchains — grew more than fivefold over the past year. The report attributes much of the increase to North Korean and Iranian state-linked actors and Russian-speaking criminal groups, and notes a 440% rise tied to wider availability of Chinese open-source AI tools.
GoKawiil's interpretation of the reporting above, not reported fact.
Storing malicious infrastructure on public, immutable blockchains makes it far harder for defenders to disrupt attacks through the usual methods, such as domain seizures or hosting takedowns, since the data is replicated globally and can't be removed. Chainalysis's findings suggest that cheaper AI tooling is lowering the skill threshold for launching such attacks, which could allow less sophisticated actors to adopt techniques previously limited to advanced state-backed groups.
- Blockchain-assisted cyberattacks have risen over fivefold in a year, per Chainalysis.
- The 'Blockchain Dead Drops' technique stores malware or C2 configuration data on public blockchains, resisting takedown efforts.
- Wider access to Chinese open-source AI tools is linked to a reported 440% increase in this attack method.
YubiKey 5 NFC Security Key — With cyberattacks growing more resilient and sophisticated via blockchain-based infrastructure, hardening your own accounts against compromise matters more than ever. A hardware security key like the YubiKey 5 NFC adds a strong physical layer of authentication that phishing and malware campaigns struggle to bypass. It's a practical, tangible step individuals can take amid rising nation-state and criminal cyber threats.
See YubiKey 5 NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: tomshardware.com — Etiido Uko, 2026-09-29
Published there as: “Blockchain-assisted cyberattacks surge fivefold, driven by Iranian and North Korean state actors, Russia-linked groups”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.