NullReceiver
Named by 3 kept items in this workspace.
Search every workspace for NullReceiver. It matches the name as written, so it can find other things that share it.
The items that name it 3
DPRK C2 technique using blank/null crypto transfers to hide the source/infrastructure of second-stage malware payloads; growing rapidly beyond initial 7 confirmed packages, sometimes chained into EtherHiding for multi-stage (6-7 stage) kill chains
Hiding a C2 IP address, short URL, or redirect string inside the recipient address field of a zero-value transaction on blockchains with memo fields (Tron, Aptos, Binance BSC), allowing the effective C2 address to be changed unlike EtherHiding's fixed burn address
Blockchain-based C2 resolution technique that encodes a C2 IP address directly in the bytes of the recipient ("to") address of a zero-value, zero-data Ethereum transfer; malware looks up a hardcoded attacker wallet, finds its most recent outbound transaction, reads the "to" address, and decodes the
All techniques in this workspace.